NVD

Id
37090  
Name
CVE-2013-0800  
Description
Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-03  
Modified Date
2013-11-02  
Seq
2013-0800  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
189771 37090 CVE-2013-0800 openSUSE-SU-2013:0630  View
189772 37090 CVE-2013-0800 openSUSE-SU-2013:0631  View
189773 37090 CVE-2013-0800 SUSE-SU-2013:0645  View
189774 37090 CVE-2013-0800 SUSE-SU-2013:0850  View
189775 37090 CVE-2013-0800 openSUSE-SU-2013:0875  View
189776 37090 CVE-2013-0800 oval:org.mitre.oval:def:16909  View
189777 37090 CVE-2013-0800 RHSA-2013:0696  View
189778 37090 CVE-2013-0800 RHSA-2013:0697  View
189779 37090 CVE-2013-0800 DSA-2699  View
189780 37090 CVE-2013-0800 http://www.mozilla.org/security/announce/2013/mfsa2013-31.html  View
189781 37090 CVE-2013-0800 USN-1791-1  View
189782 37090 CVE-2013-0800 https://bugzilla.mozilla.org/show_bug.cgi?id=825721  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20561 JVNDB-2013-002136 複数の Mozilla 製品などで使用される Pixman における整数符号エラーの脆弱性 Cairo で配布される、および複数の Mozilla 製品などその他の製品で使用される Pixman の pixman-sse2.c 内の pixman_fill_sse2 関数には、整数符号エラーの脆弱性が存在します。 CVE-2013-0800 60742 CVE-2013-0800 37090 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002136.html 2013-04-02 2013-06-27 View