CVE-2013-0800

Firefox < 20.0 - Remote Code Execution via Integer Signedness Error in pixman_fill_sse2

Title source: manual

Description

Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.

References (12)

Core 12

Core References

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1791-1

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2013/dsa-2699

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2013/mfsa2013-31.html

Broken Link vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-0696.html

Issue Tracking, Patch, Vendor Advisory x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=825721

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16909

Broken Link vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2013-0697.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html

Scores

EPSS 0.0280

EPSS Percentile 86.3%

Details

Status published

Products (19)

canonical/ubuntu_linux 10.04

canonical/ubuntu_linux 11.10

canonical/ubuntu_linux 12.04

canonical/ubuntu_linux 12.10

debian/debian_linux 7.0

mozilla/firefox < 20.0

mozilla/seamonkey < 2.17

mozilla/thunderbird < 17.0.5

mozilla/thunderbird_esr 17.0 - 17.0.5

opensuse/opensuse 11.4

... and 9 more

Published Apr 03, 2013

Tracked Since Feb 18, 2026