CVE-2013-0796

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.

Published: Apr 3, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-0796
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mozilla / firefox	-	20.0
mozilla / firefox_esr	17.0	17.0.5
mozilla / thunderbird	17.0	17.0.5
mozilla / thunderbird_esr	17.0	17.0.5
mozilla / seamonkey	-	2.17

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
http://rhn.redhat.com/errata/RHSA-2013-0696.html
http://rhn.redhat.com/errata/RHSA-2013-0697.html
http://www.debian.org/security/2013/dsa-2699
http://www.mozilla.org/security/announce/2013/mfsa2013-35.html
http://www.ubuntu.com/usn/USN-1791-1
https://bugzilla.mozilla.org/show_bug.cgi?id=827106
https://bugzilla.mozilla.org/show_bug.cgi?id=838413

Vulnerability Database

289,697

CVE-2013-0796