CVE-2013-0784 : Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, an

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Published 2013-02-19 23:55:02

Updated 2020-08-06 17:29:09

Source Mozilla Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute codeDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2013-0784

EPSS FAQ

1.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 85 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-0784

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2013-0784

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17119

Repository / Oval Repository
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=819635

819635 - IonMonkey: "Assertion failure: [barrier verifier] Unmarked edge: <unknown>,"
Exploit;Issue Tracking;Patch;Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=827687

827687 - Out of bounds read [@ ElementAnimations::EnsureStyleRuleFor] with CSS animation
Issue Tracking;Patch;Vendor Advisory
http://www.ubuntu.com/usn/USN-1729-2

USN-1729-2: Firefox regression | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=797977

797977 - IonMonkey: Enable StackIter::fp() assertion.
Issue Tracking;Patch;Vendor Advisory
http://www.ubuntu.com/usn/USN-1729-1

USN-1729-1: Firefox vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=790373

790373 - plugin scroll position listener callback may destroy listener list (crash of bug 788436)
Issue Tracking;Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=805294

805294 - RegExpCompartment::sweep should mark the atom if the entry isn't removed
Issue Tracking;Patch;Vendor Advisory
http://www.mozilla.org/security/announce/2013/mfsa2013-21.html

Miscellaneous memory safety hazards (rv:19.0 / rv:17.0.3) — Mozilla
Vendor Advisory

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=809295

809295 - Do a better job handling failure in JSCompartment::wrap
Issue Tracking;Patch;Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2013-02/msg00062.html

openSUSE-SU-2013:0324-1: moderate: Mozilla Februarys
Mailing List;Third Party Advisory

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=830943

830943 - Incorrect behavior on emscripten "bullet" test
Issue Tracking;Patch;Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html

[security-announce] openSUSE-SU-2013:0323-1: important: Mozilla: Februar
Mailing List;Third Party Advisory

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=810169

810169 - JSCompartment::global_ needs a read barrier
Issue Tracking;Patch;Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=799907

799907 - IonMonkey: Assertion failure: mir->type() == MIRType_Value, at ../ion/shared/Lowering-shared-inl.h:413 or Crash [@ js::ion::LinearScanAllocator::populateSafepoints]
Exploit;Issue Tracking;Patch;Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=801114

801114 - JSDebugErrorHook could trigger GC out of OOM handler
Issue Tracking;Patch;Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=799803

799803 - IonMonkey: Crash [@ JSString::isAtom] with invalid read
Exploit;Issue Tracking;Patch;Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=766452

766452 - Crash [@ OpenTypeReorderingOutput::getStringIndex] with measureText, Kannada script, ZWJ
Issue Tracking;Vendor Advisory
http://www.ubuntu.com/usn/USN-1748-1

USN-1748-1: Thunderbird vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url

Products affected by CVE-2013-0784

Mozilla » Firefox
Versions before (<) 19.0
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Matching versions
Mozilla » Thunderbird
Versions before (<) 17.0.3
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Matching versions
Mozilla » Seamonkey
Versions before (<) 2.16
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
Matching versions
Mozilla » Firefox Esr
Versions before (<) 17.0.3
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Matching versions
Mozilla » Thunderbird Esr
Versions before (<) 17.0.3
cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.10
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 10.04
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 11.10
cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04 ESM Edition
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Matching versions
Opensuse » Opensuse » Version: 11.4
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 12.2
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 12.1
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2013-0784

Exploit prediction scoring system (EPSS) score for CVE-2013-0784

CVSS scores for CVE-2013-0784

References for CVE-2013-0784

Products affected by CVE-2013-0784