Endpoint Vulnerability

Memory corruption in XBL with XML bindings containing SVG

Description

Security researcher Sviatoslav Chagaev reported that when using an XBL file containing multiple XML bindings with SVG content, a memory corruption can occur. In concern with remote XUL, this can lead to an exploitable crash.

Affected Products

Thunderbird

References

CVE-2013-0752,