CVE-2013-0768: Buffer Overflow
Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0768?
CVE-2013-0768 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2013-0768?
To mitigate CVE-2013-0768, update your Mozilla Firefox, Thunderbird, SeaMonkey, or relevant software to the latest version beyond the vulnerable releases.
Which versions are affected by CVE-2013-0768?
CVE-2013-0768 affects Firefox versions before 18.0, Thunderbird versions before 17.0.2, and SeaMonkey versions before 2.15.
Can CVE-2013-0768 be exploited remotely?
Yes, CVE-2013-0768 can be exploited remotely through crafted HTML documents.
What types of software are impacted by CVE-2013-0768?
CVE-2013-0768 impacts web browsers and email clients, specifically Mozilla Firefox, Thunderbird, and SeaMonkey.