The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade firefox | Dec 1, 2016 | Feb 19, 2013 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade firefoxUpgrade libxulUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbird | Dec 10, 2025 | Feb 19, 2013 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Feb 19, 2013 |
| Mfsa2013 22 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 19.0 | Feb 21, 2013 | Feb 19, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.16.0 | Feb 21, 2013 | Feb 19, 2013 |
| Suse | — | Upgrade mozilla-jsUpgrade chmsee-debugsourceUpgrade MozillaThunderbird-debuginfoUpgrade xulrunnerUpgrade beagle-langUpgrade MozillaFirefox-branding-SLEDUpgrade xulrunner-x86Upgrade mozilla-js-debuginfo-32bitUpgrade MozillaThunderbird-devel-debuginfoUpgrade seamonkey-debugsourceUpgrade MozillaThunderbird-translations-commonUpgrade beagle-evolutionUpgrade xulrunner-debuginfoUpgrade mozilla-js-x86Upgrade beagle-develUpgrade xulrunner-devel-debuginfoUpgrade seamonkey-venkmanUpgrade sle-sdk-releaseUpgrade libfreebl3Upgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-branding-upstreamUpgrade xulrunner-32bitUpgrade MozillaFirefox-develUpgrade libfreebl3-x86Upgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade mozilla-nspr-64bitUpgrade MozillaThunderbird-translations-otherUpgrade xulrunner-debugsourceUpgrade MozillaThunderbird-develUpgrade enigmail-debuginfoUpgrade firefox3-python-baseUpgrade beagle-guiUpgrade mhtml-firefoxUpgrade seamonkey-translations-otherUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-js-32bitUpgrade mozilla-nsprUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-commonUpgrade enigmailUpgrade xulrunner-debuginfo-x86Upgrade seamonkeyUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translationsUpgrade MozillaFirefox-debuginfoUpgrade mozilla-nss-develUpgrade seamonkey-translations-commonUpgrade mozilla-js-debuginfoUpgrade xulrunner-buildsymbolsUpgrade mozilla-nss-64bitUpgrade mozilla-nspr-x86Upgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade MozillaFirefox-debugsourceUpgrade beagle-firefoxUpgrade mozilla-nspr-32bitUpgrade beagleUpgrade seamonkey-debuginfoUpgrade xulrunner-develUpgrade mozilla-nss-x86Upgrade chmseeUpgrade MozillaThunderbird-debugsourceUpgrade seamonkey-dom-inspectorUpgrade mozilla-nss-toolsUpgrade MozillaFirefoxUpgrade mozilla-js-debuginfo-x86Upgrade xulrunner-debuginfo-32bitUpgrade seamonkey-ircUpgrade chmsee-debuginfo | Feb 17, 2015 | Feb 19, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Feb 19, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub