CVE-2013-0760: Canonical Ubuntu Linux

High severity, CVSS 9.3. EPSS: 5.3% chance of exploitation in the next 30 days.

Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 11.10 only; version 12.04 only; version 12.10 only
• Mozilla Firefox: before 10.0.11 (fixed in 10.0.11); before 18.0 (fixed in 18.0); from 17.0, before 17.0.2 (fixed in 17.0.2)
• Mozilla Seamonkey: before 2.15 (fixed in 2.15)
• Mozilla Thunderbird: before 17.0.2 (fixed in 17.0.2)
• Mozilla Thunderbird ESR: before 10.0.12 (fixed in 10.0.12); from 17.0, before 17.0.2 (fixed in 17.0.2)
• Opensuse Opensuse: version 11.4 only; version 12.1 only; version 12.2 only
• Suse Linux Enterprise Desktop: version 10 only; version 11 only
• Suse Linux Enterprise Server: version 10 only; version 11 only
• Suse Linux Enterprise Software Development Kit: version 10 only; version 11 only

Published 2013-01-13. Last modified 2026-06-16.