Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkeyUpgrade ca_root_nssUpgrade libxul | Dec 10, 2025 | Jan 9, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Jan 13, 2013 |
| Mfsa2013 03 | — | Upgrade to Mozilla Firefox ESR version 17.0.2Upgrade to Mozilla Firefox version 18.0Upgrade to the latest version of Mozilla Firefox | Jan 14, 2013 | Jan 13, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.15.0 | Jan 10, 2013 | Jan 8, 2013 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird ESR version 17.0.2Upgrade to Mozilla Thunderbird version 17.0.2 | Jan 10, 2013 | Jan 8, 2013 |
| Suse | — | Upgrade mozilla-nss-certs-debuginfoUpgrade seamonkey-venkmanUpgrade mozilla-nss-debugsourceUpgrade xulrunner-x86Upgrade xulrunner-buildsymbolsUpgrade mozilla-nss-debuginfoUpgrade mozilla-nss-toolsUpgrade libsoftokn3-debuginfo-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-nspr-debugsourceUpgrade MozillaFirefoxUpgrade MozillaFirefox-debugsourceUpgrade seamonkey-translations-otherUpgrade libsoftokn3Upgrade libfreebl3-32bitUpgrade mozilla-nss-debuginfo-x86Upgrade mozilla-nss-certs-32bitUpgrade firefox3-gtk2Upgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfoUpgrade MozillaFirefox-debuginfoUpgrade firefox3-gtk2-32bitUpgrade libfreebl3Upgrade enigmail-debuginfoUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-js-debuginfo-32bitUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nss-x86Upgrade mozilla-nss-develUpgrade libfreebl3-x86Upgrade mozilla-nss-64bitUpgrade libfreebl3-debuginfo-x86Upgrade mozilla-nspr-x86Upgrade mozilla-nss-certsUpgrade seamonkeyUpgrade MozillaFirefox-branding-SLEDUpgrade xulrunnerUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozilla-nss-certs-x86Upgrade xulrunner-32bitUpgrade mozilla-nspr-debuginfo-x86Upgrade xulrunner-develUpgrade firefox3-pango-32bitUpgrade xulrunner-debuginfo-32bitUpgrade MozillaThunderbird-devel-debuginfoUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-js-debuginfoUpgrade seamonkey-translations-commonUpgrade MozillaThunderbird-develUpgrade seamonkey-debugsourceUpgrade libfreebl3-debuginfoUpgrade libsoftokn3-x86Upgrade mozilla-js-debuginfo-x86Upgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-debuginfo-x86Upgrade firefox3-cairo-32bitUpgrade MozillaThunderbirdUpgrade mozilla-nspr-64bitUpgrade mozilla-nspr-develUpgrade mozilla-jsUpgrade libsoftokn3-32bitUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-js-32bitUpgrade xulrunner-devel-debuginfoUpgrade firefox3-pangoUpgrade mozilla-nssUpgrade MozillaThunderbird-translations-commonUpgrade seamonkey-debuginfoUpgrade mozilla-nss-sysinit-32bitUpgrade xulrunner-debuginfo-x86Upgrade mozilla-nss-sysinit-x86Upgrade xulrunner-debuginfoUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nsprUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nspr-debuginfoUpgrade mozilla-nspr-32bitUpgrade libfreebl3-debuginfo-32bitUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-debuginfo-32bitUpgrade sle-sdk-releaseUpgrade libsoftokn3-debuginfoUpgrade mozilla-js-x86Upgrade seamonkey-dom-inspectorUpgrade enigmailUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-tools-debuginfoUpgrade firefox3-cairoUpgrade seamonkey-ircUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-sysinitUpgrade xulrunner-debugsourceUpgrade MozillaFirefox-translations-common | Feb 17, 2015 | Jan 13, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Nov 8, 2024 | Jan 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub