CVE-2013-0796

Опубликовано: 03 апр. 2013

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0696.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0697.html
Third Party Advisory
http://www.debian.org/security/2013/dsa-2699
Third Party Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-35.html
Exploit
Vendor Advisory
http://www.ubuntu.com/usn/USN-1791-1
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=827106
Exploit
Issue Tracking
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=838413
Exploit
Issue Tracking
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0696.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0697.html
Third Party Advisory
http://www.debian.org/security/2013/dsa-2699
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 20.0 (исключая)