CVE-2013-0800: Medium severity firefox vulnerability
Integer signedness error in the pixmanfillsse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0800?
CVE-2013-0800 is rated as high severity due to potential exploitation that allows an attacker to execute arbitrary code.
How do I fix CVE-2013-0800?
To fix CVE-2013-0800, you should update affected software to the latest version that has addressed this vulnerability.
Which products are affected by CVE-2013-0800?
CVE-2013-0800 affects multiple products including Mozilla Firefox, Thunderbird, SeaMonkey, and versions of Debian and Ubuntu.
Is CVE-2013-0800 already patched?
Yes, CVE-2013-0800 has been patched in the newer versions of the affected software released after the vulnerability was identified.
What types of attacks can exploit CVE-2013-0800?
CVE-2013-0800 can potentially be exploited via crafted images or other file types that can leverage the integer signedness error.