CVE-2013-0746: Critical severity firefox vulnerability
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What are the affected versions for CVE-2013-0746?
CVE-2013-0746 affects Mozilla Firefox versions before 18.0, Firefox ESR versions before 10.0.12 and 17.0.2, Thunderbird versions before 17.0.2, Thunderbird ESR versions before 10.0.12 and 17.0.2, and SeaMonkey versions before 2.15.
What is the impact of CVE-2013-0746?
CVE-2013-0746 can lead to potential memory corruption issues due to improper handling of the jsval data type in quickstubs.
How do I mitigate CVE-2013-0746?
To mitigate CVE-2013-0746, users should upgrade to the latest versions of affected software, particularly Mozilla Firefox, Thunderbird, and SeaMonkey.
Is CVE-2013-0746 critical for my system security?
Yes, CVE-2013-0746 poses a security risk that could potentially be exploited, making it important to address.
Where can I find more information about CVE-2013-0746?
For detailed information regarding CVE-2013-0746, refer to security announcements and advisories from Mozilla and relevant distributions.