First published: Sun Jan 13 2013(Updated: )
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <18.0 | |
Mozilla Firefox ESR | >=10.0<10.0.12 | |
Mozilla Firefox ESR | >=17.0<17.0.2 | |
Mozilla SeaMonkey | <2.15 | |
Mozilla Thunderbird | <17.0.2 | |
Mozilla Thunderbird ESR | >=10.0<10.0.12 | |
Mozilla Thunderbird ESR | >=17.0<17.0.2 | |
openSUSE | =11.4 | |
openSUSE | =12.1 | |
openSUSE | =12.2 | |
SUSE Linux Enterprise Desktop with Beagle | =10-sp4 | |
SUSE Linux Enterprise Desktop with Beagle | =11-sp2 | |
SUSE Linux Enterprise Server | =10-sp4 | |
SUSE Linux Enterprise Server | =11-sp2 | |
suse linux enterprise server vmware | =11-sp2 | |
SUSE Linux Enterprise Software Development Kit | =10-sp4 | |
SUSE Linux Enterprise Software Development Kit | =11-sp2 | |
Ubuntu Linux | =10.04 | |
Ubuntu Linux | =11.10 | |
Ubuntu Linux | =12.04 | |
Ubuntu Linux | =12.10 | |
Mozilla Firefox and Thunderbird | <18.0 | |
Mozilla Firefox and Thunderbird | >=10.0<10.0.12 | |
Mozilla Firefox and Thunderbird | >=17.0<17.0.2 | |
Mozilla Firefox and Thunderbird | <17.0.2 | |
Mozilla Thunderbird | >=10.0<10.0.12 | |
Mozilla Thunderbird | >=17.0<17.0.2 | |
Open edX | =11.4 | |
Open edX | =12.1 | |
Open edX | =12.2 | |
SUSE Linux Enterprise Desktop | =10-sp4 | |
SUSE Linux Enterprise Desktop | =11-sp2 | |
SUSE Linux Enterprise Server | =11-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2013-0749 is considered high due to the potential for remote attackers to cause a denial of service.
To fix CVE-2013-0749, update your Mozilla Firefox, Firefox ESR, Thunderbird, or SeaMonkey to the latest version that patches the vulnerability.
CVE-2013-0749 affects versions of Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, and multiple versions of SeaMonkey.
CVE-2013-0749 allows remote attackers to exploit memory corruption vulnerabilities resulting in denial of service.
While CVE-2013-0749 is several years old, it underscores the importance of keeping software updated to mitigate known vulnerabilities.