CVE-2013-0800
published 2013-04-03CVE-2013-0800: Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0…
PriorityP337medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.94%
89.2th percentile
Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| mozilla | firefox | < 20.0 | 20.0 |
| mozilla | firefox | >= 17.0 < 17.0.5 | 17.0.5 |
| mozilla | seamonkey | < 2.17 | 2.17 |
| mozilla | thunderbird | < 17.0.5 | 17.0.5 |
| mozilla | thunderbird_esr | >= 17.0 < 17.0.5 | 17.0.5 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_software_development_kit | — | — |
| suse | linux_enterprise_software_development_kit | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_ubuntu10.0CRITICAL
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2013-04-08·CVSS 10.0
CVE-2013-0788 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan
Sreckovic and Joe Drew discovered multiple memory safety issues affecting
Thunderbird. If the user were tricked into opening a specially crafted
message with scripting enabled, an attacker could possibly exploit these
to cause a denial of service via application crash, or potentially
execute code with the privileges of the user invoking Thunderbird.
(CVE-2013-0788)
Ambroz Bizjak discovered an out-of-bounds array read in the
CERT_DecodeCertPackage function of the Network Security Services (NSS)
libary when decoding certain certificates. An attacker could potentially
exploit this to cause a denial of service via application cras
Ubuntu
Unity Firefox Extension update
vendor_ubuntu·2013-04-04·CVSS 10.0
[CRITICAL] Unity Firefox Extension update
Title: Unity Firefox Extension update
Summary: This update provides a compatible version of Unity Firefox Extension for
Firefox 20.
USN-1786-1 fixed vulnerabilities in Firefox. This update provides the
corresponding update for Unity Firefox Extension.
Original advisory details:
Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan
Sreckovic, Joe Drew, Andrew McCreight, Randell Jesup, Gary Kwong and
Mats Palmgren discovered multiple memory safety issues affecting Firefox.
If the user were tricked into opening a specially crafted page, an
attacker could possibly exploit these to cause a denial of service via
application crash, or potentially execute code with the privileges of the
user invoking Firefox. (CVE-2013-0788, CVE-2013-0789)
Ambroz Bizjak discovered an out-of-boun
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2013-04-04·CVSS 10.0
CVE-2013-0788 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan
Sreckovic, Joe Drew, Andrew McCreight, Randell Jesup, Gary Kwong and
Mats Palmgren discovered multiple memory safety issues affecting Firefox.
If the user were tricked into opening a specially crafted page, an
attacker could possibly exploit these to cause a denial of service via
application crash, or potentially execute code with the privileges of the
user invoking Firefox. (CVE-2013-0788, CVE-2013-0789)
Ambroz Bizjak discovered an out-of-bounds array read in the
CERT_DecodeCertPackage function of the Network Security Services (NSS)
libary when decoding certain certificates. An attacker
Red Hat
Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)
vendor_redhat·2013-04-02·CVSS 6.8
CVE-2013-0800 [MEDIUM] CWE-787 Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)
Mozilla: Out-of-bounds write in Cairo library (MFSA 2013-31)
Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
Package: thunderbird (Red Hat Enterprise Linux 5) - Affected
GHSA
GHSA-w5mr-mjj8-pwcp: Integer signedness error in the pixman_fill_sse2 function in pixman-sse2
ghsa_unreviewed·2022-05-13
CVE-2013-0800 [MEDIUM] GHSA-w5mr-mjj8-pwcp: Integer signedness error in the pixman_fill_sse2 function in pixman-sse2
Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00012.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0696.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0697.htmlhttp://www.debian.org/security/2013/dsa-2699http://www.mozilla.org/security/announce/2013/mfsa2013-31.htmlhttp://www.ubuntu.com/usn/USN-1791-1https://bugzilla.mozilla.org/show_bug.cgi?id=825721https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16909http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00012.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0696.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0697.htmlhttp://www.debian.org/security/2013/dsa-2699http://www.mozilla.org/security/announce/2013/mfsa2013-31.htmlhttp://www.ubuntu.com/usn/USN-1791-1https://bugzilla.mozilla.org/show_bug.cgi?id=825721https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16909
2013-04-03
Published