CVE-2013-1676: Buffer Overflow
The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1676?
CVE-2013-1676 is a critical vulnerability that can allow remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2013-1676?
To fix CVE-2013-1676, update Mozilla Firefox or Thunderbird to version 21.0 or higher.
Which software is affected by CVE-2013-1676?
CVE-2013-1676 affects Mozilla Firefox versions prior to 21.0, as well as Thunderbird versions before 17.0.6.
Can CVE-2013-1676 cause data loss?
Yes, CVE-2013-1676 can potentially lead to data loss due to the execution of arbitrary code.
Is CVE-2013-1676 actively exploited?
CVE-2013-1676 has been known to be actively exploited by attackers prior to patches being applied.