CVEvulnerability
CVE-2013-0796
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
Affected configurations
• mozilla firefox (< 20.0)
• mozilla firefox (>= 17.0 < 17.0.5)
• mozilla thunderbird (>= 17.0 < 17.0.5)
• mozilla thunderbird esr (>= 17.0 < 17.0.5)
• mozilla seamonkey (< 2.17)
References
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0696.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0697.html Third Party Advisory
- http://www.debian.org/security/2013/dsa-2699 Third Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-35.html Exploit, Vendor Advisory
- http://www.ubuntu.com/usn/USN-1791-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=827106 Exploit, Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=838413 Exploit, Issue Tracking, Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0696.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0697.html Third Party Advisory
- http://www.debian.org/security/2013/dsa-2699 Third Party Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-35.html Exploit, Vendor Advisory
- http://www.ubuntu.com/usn/USN-1791-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=827106 Exploit, Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=838413 Exploit, Issue Tracking, Patch, Vendor Advisory