CVE-2013-0796: Critical severity firefox vulnerability
The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0796?
CVE-2013-0796 has a high severity due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2013-0796?
To mitigate CVE-2013-0796, upgrade to Mozilla Firefox version 20.0 or later, or Mozilla Thunderbird, Thunderbird ESR, and SeaMonkey to their updated versions addressing this vulnerability.
Which versions are affected by CVE-2013-0796?
CVE-2013-0796 affects Mozilla Firefox prior to 20.0, Firefox ESR versions prior to 17.0.5, Thunderbird versions prior to 17.0.5, Thunderbird ESR versions prior to 17.0.5, and SeaMonkey versions prior to 2.17 on Linux.
What products are impacted by CVE-2013-0796?
CVE-2013-0796 impacts Mozilla Firefox, Firefox ESR, Thunderbird, Thunderbird ESR, and SeaMonkey when running on Linux.
Can CVE-2013-0796 lead to denial of service?
Yes, CVE-2013-0796 can lead to denial of service in addition to allowing remote code execution.