1. Home
  2. Vulnerabilities
  3. CVE-2013-0800

CVE-2013-0800

CVSS v2.0 6.8 (Medium)
68% Progress
EPSS 1.93 % (89th)
1.93% Progress
Affected Products 11
Advisories 12
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.

Weaknesses
CWE-NVD-Other
CVE Status
PUBLISHED
CNA
Mozilla Corporation
Published Date
2013-04-03 11:56:21
(11 years ago)
Updated Date
2021-03-11 15:35:13
(3 years ago)

Affected Products

Canonical

Debian

Mozilla

Opensuse

Suse

Configuration #1

    CPE23 From Up To
  Mozilla Firefox prior 20.0 version cpe:2.3:a:mozilla:firefox < 20.0
  Mozilla Firefox Esr from 17.0 version and prior 17.0.5 version cpe:2.3:a:mozilla:firefox_esr >= 17.0 < 17.0.5
  Mozilla Seamonkey prior 2.17 version cpe:2.3:a:mozilla:seamonkey < 2.17
  Mozilla Thunderbird prior 17.0.5 version cpe:2.3:a:mozilla:thunderbird < 17.0.5
  Mozilla Thunderbird Esr from 17.0 version and prior 17.0.5 version cpe:2.3:a:mozilla:thunderbird_esr >= 17.0 < 17.0.5

Configuration #2

    CPE23 From Up To
  Debian Linux 7.0 cpe:2.3:o:debian:debian_linux:7.0

Configuration #3

    CPE23 From Up To
  Canonical Ubuntu Linux 10.04 cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-
  Canonical Ubuntu Linux 11.10 cpe:2.3:o:canonical:ubuntu_linux:11.10
  Canonical Ubuntu Linux 12.04 cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-
  Canonical Ubuntu Linux 12.10 cpe:2.3:o:canonical:ubuntu_linux:12.10

Configuration #4

    CPE23 From Up To
  Opensuse 11.4 cpe:2.3:o:opensuse:opensuse:11.4
  Opensuse 12.1 cpe:2.3:o:opensuse:opensuse:12.1
  Opensuse 12.2 cpe:2.3:o:opensuse:opensuse:12.2
  Opensuse 12.3 cpe:2.3:o:opensuse:opensuse:12.3
  Suse Linux Enterprise Desktop 10 SP4 cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-
  Suse Linux Enterprise Desktop 11 SP2 cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2
  Suse Linux Enterprise Server 10 SP4 cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-
  Suse Linux Enterprise Server 11 SP1 For cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:-
  Suse Linux Enterprise Server 11 SP1 for Vmware cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:vmware
  Suse Linux Enterprise Server 11 SP2 For cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-
  Suse Linux Enterprise Server 11 SP2 for Vmware cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware
  Suse Linux Enterprise Software Development Kit 10 SP4 cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4
  Suse Linux Enterprise Software Development Kit 11 SP2 cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2