NetSight
medium5.8

CVE-2013-0772

The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain se…

Impact

The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.

Affected products

VendorProductAffected versions
MozillaFirefox
before 19.0
MozillaSeamonkey
before 2.16
OpensuseOpensuse
Versions 11.4, 12.1, 12.2
RedhatEnterprise Linux Aus
Version 5.9
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.3
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
CanonicalUbuntu Linux
Versions 10.04, 11.10, 12.04, 12.10

Weakness classification

References