CVE-2013-0752: Buffer Overflow
Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0752?
CVE-2013-0752 has a severity rating that indicates it allows for remote code execution or denial of service due to memory corruption.
How do I fix CVE-2013-0752?
To fix CVE-2013-0752, upgrade to Firefox version 18.0 or later, Firefox ESR 17.0.2 or later, Thunderbird 17.0.2 or later, Thunderbird ESR 17.0.2 or later, or SeaMonkey 2.15 or later.
Which software versions are affected by CVE-2013-0752?
CVE-2013-0752 affects Mozilla Firefox versions before 18.0, Firefox ESR versions before 17.0.2, Thunderbird versions before 17.0.2, and SeaMonkey versions before 2.15.
What type of attack does CVE-2013-0752 enable?
CVE-2013-0752 enables remote attackers to execute arbitrary code or cause a denial of service.
Is CVE-2013-0752 specific to any operating systems?
CVE-2013-0752 can affect various operating systems including openSUSE and Ubuntu when running the vulnerable versions of the software.