CVE-2013-0772

2013-02-2000:00:00

ubuntu.com

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

EPSS

0.017

Percentile

87.9%

JSON

The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0,
Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote
attackers to obtain sensitive information from process memory or cause a
denial of service (out-of-bounds read and application crash) via a crafted
GIF image.

Notes

Author	Note
jdstrand	xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details)

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 19.0+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchfirefox< 19.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 19.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 19.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu10.04noarchthunderbird< 17.0.3+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 17.0.3+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 17.0.3+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 17.0.3+build1-0ubuntu0.12.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	firefox	< 19.0+build1-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.10	noarch	firefox	< 19.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	firefox	< 19.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 19.0+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	10.04	noarch	thunderbird	< 17.0.3+build1-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.10	noarch	thunderbird	< 17.0.3+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	thunderbird	< 17.0.3+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	thunderbird	< 17.0.3+build1-0ubuntu0.12.10.1	UNKNOWN