CVEvulnerability
CVE-2013-0772
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-119
Description
The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
Affected configurations
• mozilla firefox (< 19.0)
• mozilla seamonkey (< 2.16)
• opensuse opensuse 11.4
• opensuse opensuse 12.1
• opensuse opensuse 12.2
• redhat enterprise linux aus 5.9
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux eus 5.9
• redhat enterprise linux eus 6.3
• redhat enterprise linux server 5.0
• redhat enterprise linux server 6.0
• redhat enterprise linux workstation 5.0
• redhat enterprise linux workstation 6.0
• canonical ubuntu linux 10.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1812.html Third Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-22.html Patch, Vendor Advisory
- http://www.ubuntu.com/usn/USN-1729-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1729-2 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=801366 Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17159 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1812.html Third Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-22.html Patch, Vendor Advisory
- http://www.ubuntu.com/usn/USN-1729-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1729-2 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=801366 Issue Tracking, Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17159 Third Party Advisory