NetSight
IP …
critical9.3Public exploit code

CVE-2013-0758

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x be…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.

Affected products

VendorProductAffected versions
MozillaFirefox
before 18.0
from 10.0 before 10.0.12
from 17.0 before 17.0.2
MozillaSeamonkey
before 2.15
MozillaThunderbird
before 17.0.2
MozillaThunderbird Esr
from 10.0 before 10.0.12
from 17.0 before 17.0.2
OpensuseOpensuse
Versions 11.4, 12.1, 12.2
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Server
Versions 10, 11
SuseLinux Enterprise Software Development Kit
Versions 10, 11
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.3
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 5.9

Weakness classification

CWE-94

References