CVE-2013-0796
published 2013-04-03CVE-2013-0796: The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and…
PriorityP340critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.95%
94.1th percentile
The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | mesa | < mesa 8.0.5-7 (bookworm) | mesa 8.0.5-7 (bookworm) |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | — | — |
| mesa3d | mesa | >= 0 < 8.0.5-7 | 8.0.5-7 |
| mesa3d | mesa | >= 0 < 8.0.5-7 | 8.0.5-7 |
| mesa3d | mesa | >= 0 < 8.0.5-7 | 8.0.5-7 |
| mesa3d | mesa | >= 0 < 8.0.5-7 | 8.0.5-7 |
| mozilla | firefox | < 20.0 | 20.0 |
| mozilla | firefox | >= 17.0 < 17.0.5 | 17.0.5 |
| mozilla | seamonkey | < 2.17 | 2.17 |
| mozilla | thunderbird | >= 17.0 < 17.0.5 | 17.0.5 |
| mozilla | thunderbird_esr | >= 17.0 < 17.0.5 | 17.0.5 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7f9w-h963-rcwv: The WebGL subsystem in Mozilla Firefox before 20
ghsa_unreviewed·2022-05-17
CVE-2013-0796 [HIGH] GHSA-7f9w-h963-rcwv: The WebGL subsystem in Mozilla Firefox before 20
The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
GHSA
GHSA-847q-55hx-98vj: The Intel drivers in Mesa 8
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2013-1872 [CRITICAL] CWE-119 GHSA-847q-55hx-98vj: The Intel drivers in Mesa 8
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
OSV
CVE-2013-1872: The Intel drivers in Mesa 8
osv·2013-08-19·CVSS 10.0
CVE-2013-1872 [CRITICAL] CVE-2013-1872: The Intel drivers in Mesa 8
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
Red Hat
Mesa: Memory corruption (OOB read/write) on intel drivers
vendor_redhat·2013-05-29·CVSS 10.0
CVE-2013-1872 [CRITICAL] CWE-119 Mesa: Memory corruption (OOB read/write) on intel drivers
Mesa: Memory corruption (OOB read/write) on intel drivers
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
Package: mesa (Red Hat Enterprise Linux 5) - Not affected
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2013-04-08·CVSS 10.0
CVE-2013-0788 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan
Sreckovic and Joe Drew discovered multiple memory safety issues affecting
Thunderbird. If the user were tricked into opening a specially crafted
message with scripting enabled, an attacker could possibly exploit these
to cause a denial of service via application crash, or potentially
execute code with the privileges of the user invoking Thunderbird.
(CVE-2013-0788)
Ambroz Bizjak discovered an out-of-bounds array read in the
CERT_DecodeCertPackage function of the Network Security Services (NSS)
libary when decoding certain certificates. An attacker could potentially
exploit this to cause a denial of service via application cras
Ubuntu
Unity Firefox Extension update
vendor_ubuntu·2013-04-04·CVSS 10.0
[CRITICAL] Unity Firefox Extension update
Title: Unity Firefox Extension update
Summary: This update provides a compatible version of Unity Firefox Extension for
Firefox 20.
USN-1786-1 fixed vulnerabilities in Firefox. This update provides the
corresponding update for Unity Firefox Extension.
Original advisory details:
Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan
Sreckovic, Joe Drew, Andrew McCreight, Randell Jesup, Gary Kwong and
Mats Palmgren discovered multiple memory safety issues affecting Firefox.
If the user were tricked into opening a specially crafted page, an
attacker could possibly exploit these to cause a denial of service via
application crash, or potentially execute code with the privileges of the
user invoking Firefox. (CVE-2013-0788, CVE-2013-0789)
Ambroz Bizjak discovered an out-of-boun
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2013-04-04·CVSS 10.0
CVE-2013-0788 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan
Sreckovic, Joe Drew, Andrew McCreight, Randell Jesup, Gary Kwong and
Mats Palmgren discovered multiple memory safety issues affecting Firefox.
If the user were tricked into opening a specially crafted page, an
attacker could possibly exploit these to cause a denial of service via
application crash, or potentially execute code with the privileges of the
user invoking Firefox. (CVE-2013-0788, CVE-2013-0789)
Ambroz Bizjak discovered an out-of-bounds array read in the
CERT_DecodeCertPackage function of the Network Security Services (NSS)
libary when decoding certain certificates. An attacker
Red Hat
Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35)
vendor_redhat·2013-04-02·CVSS 10.0
CVE-2013-0796 [CRITICAL] Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35)
Mozilla: WebGL crash with Mesa graphics driver on Linux (MFSA 2013-35)
The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
Package: thunderbird (Red Hat Enterprise Linux 5) - Affected
Debian
CVE-2013-1872: mesa - The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to c...
vendor_debian·2013·CVSS 10.0
CVE-2013-1872 [CRITICAL] CVE-2013-1872: mesa - The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to c...
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
Scope: local
bookworm: resolved (fixed in 8.0.5-7)
bullseye: resolved (fixed in 8.0.5-7)
forky: resolved (fixed in 8.0.5-7)
sid: resolved (fixed in 8.0.5-7)
trixie: resolved (fixed in 8.0.5-7)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00012.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0696.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0697.htmlhttp://www.debian.org/security/2013/dsa-2699http://www.mozilla.org/security/announce/2013/mfsa2013-35.htmlhttp://www.ubuntu.com/usn/USN-1791-1https://bugzilla.mozilla.org/show_bug.cgi?id=827106https://bugzilla.mozilla.org/show_bug.cgi?id=838413http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00012.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0696.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0697.htmlhttp://www.debian.org/security/2013/dsa-2699http://www.mozilla.org/security/announce/2013/mfsa2013-35.htmlhttp://www.ubuntu.com/usn/USN-1791-1https://bugzilla.mozilla.org/show_bug.cgi?id=827106https://bugzilla.mozilla.org/show_bug.cgi?id=838413
2013-04-03
Published