CVE-2013-0758
NoneCVSS
—
EPSS
73.4%
Published
Jan 13, 2013
CISA due date
—
The record
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:10.0.12-1.el5_9 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:10.0.12-3.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:10.0.12-1.el6_3 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:10.0.12-3.el5_9 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:10.0.12-3.el5_9 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2017-5404 A use-after-free error can occur when manipulating ranges in selections with one node… Also affects firefox
- CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Also affects firefox
- CVE-2016-9899 Use-after-free while manipulating DOM events and removing audio elements due to errors in… Also affects firefox
- CVE-2017-5375 JIT code allocation can allow for a bypass of ASLR and DEP protections leading to… Also affects firefox
- CVE-2017-5373 Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Also affects firefox
- CVE-2016-9893 Memory safety bugs were reported in Thunderbird 45.5. Also affects firefox
- CVE-2016-9066 A buffer overflow resulting in a potentially exploitable crash due to memory allocation… Also affects firefox
- CVE-2016-9079 A use-after-free vulnerability in SVG Animation has been discovered. Also affects firefox