CVE-2013-0796

Mozilla Firefox < 20.0 - Remote Code Execution via WebGL and Mesa Driver Interaction

Title source: llm

Description

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.

References (12)

Core 12

Core References

Exploit, Issue Tracking, Patch, Vendor Advisory x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=838413

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1791-1

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2013/dsa-2699

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html

Exploit, Issue Tracking, Vendor Advisory x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=827106

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-0696.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html

Exploit, Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2013/mfsa2013-35.html

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-0697.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html

Scores

EPSS 0.0795

EPSS Percentile 94.1%

Details

Status published

Products (4)

mozilla/firefox < 20.0

mozilla/seamonkey < 2.17

mozilla/thunderbird 17.0 - 17.0.5

mozilla/thunderbird_esr 17.0 - 17.0.5

Published Apr 03, 2013

Tracked Since Feb 18, 2026