Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow.
History

Mon, 21 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2013-01-13T20:00:00

Updated: 2024-08-06T14:33:05.865Z

Reserved: 2013-01-02T00:00:00

Link: CVE-2013-0750

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2013-01-13T20:55:01.713

Modified: 2024-10-21T13:55:03.510

Link: CVE-2013-0750

cve-icon Redhat

Severity : Critical

Publid Date: 2013-01-08T00:00:00Z

Links: CVE-2013-0750 - Bugzilla