CVE-2013-0792

Mozilla: Memory corruption while rendering grayscale PNG images (MFSA 2013-39)

Published Apr 3, 2013 CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Description
Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly handle color profiles during PNG rendering, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a grayscale PNG image.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-0803 Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly handle color profiles during PNG rendering, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a grayscale PNG image.
Ubuntu USN Ubuntu USN USN-1786-1 Firefox vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 2:41 PM
Reserved
Jan 2, 2013, 12:00 AM
Status
Modified
Published
Apr 3, 2013, 11:56 AM
Modified
Jun 16, 2026, 11:50 PM
Severity
Moderate
Public date
Apr 2, 2013, 12:00 AM