The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbird | Dec 1, 2016 | Feb 19, 2013 |
| Freebsd | — | Upgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade libxulUpgrade firefox | Dec 10, 2025 | Feb 19, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Feb 19, 2013 |
| Mfsa2013 22 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 19.0 | Feb 21, 2013 | Feb 19, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.16Upgrade to the latest version of Mozilla SeaMonkey | Feb 21, 2013 | Feb 19, 2013 |
| Suse | — | Upgrade mozilla-nspr-x86Upgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-js-debuginfoUpgrade beagle-firefoxUpgrade xulrunner-debuginfo-x86Upgrade MozillaFirefox-debuginfoUpgrade mozilla-nspr-develUpgrade xulrunner-debuginfo-32bitUpgrade MozillaFirefox-translationsUpgrade mozillafirefox-buildsymbolsUpgrade seamonkey-translations-commonUpgrade mozilla-nss-x86Upgrade mozilla-nss-develUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-translations-commonUpgrade beagle-guiUpgrade chmseeUpgrade xulrunner-develUpgrade enigmailUpgrade libfreebl3-32bitUpgrade chmsee-debuginfoUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-32bitUpgrade mhtml-firefoxUpgrade seamonkey-debuginfoUpgrade mozilla-nss-64bitUpgrade mozilla-js-debuginfo-x86Upgrade seamonkey-ircUpgrade seamonkeyUpgrade mozilla-js-32bitUpgrade seamonkey-translations-otherUpgrade MozillaFirefox-debugsourceUpgrade MozillaThunderbird-debugsourceUpgrade beagleUpgrade xulrunner-buildsymbolsUpgrade seamonkey-dom-inspectorUpgrade mozilla-nspr-64bitUpgrade libfreebl3-x86Upgrade xulrunner-devel-debuginfoUpgrade enigmail-debuginfoUpgrade xulrunnerUpgrade sle-sdk-releaseUpgrade xulrunner-32bitUpgrade MozillaThunderbird-develUpgrade libfreebl3Upgrade beagle-develUpgrade seamonkey-venkmanUpgrade mozilla-nssUpgrade xulrunner-debugsourceUpgrade MozillaThunderbird-devel-debuginfoUpgrade xulrunner-debuginfoUpgrade MozillaFirefox-develUpgrade xulrunner-x86Upgrade chmsee-debugsourceUpgrade seamonkey-debugsourceUpgrade MozillaFirefox-translations-otherUpgrade beagle-langUpgrade MozillaThunderbird-debuginfoUpgrade beagle-evolutionUpgrade mozilla-js-x86Upgrade mozilla-jsUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade firefox3-python-baseUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-js-debuginfo-32bit | Feb 17, 2015 | Feb 19, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Feb 19, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub