# CVEs published 2013-01-13 29 CVEs were published on January 13, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-0155](https://cve.now/CVE-2013-0155.md): Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling (no CVSS, activerecord) - [CVE-2013-0156](https://cve.now/CVE-2013-0156.md): active\_support/core\_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.1 (no CVSS, actionpack) - [CVE-2013-0744](https://cve.now/CVE-2013-0744.md): Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ES (no CVSS) - [CVE-2013-0745](https://cve.now/CVE-2013-0745.md): The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x (no CVSS) - [CVE-2013-0746](https://cve.now/CVE-2013-0746.md): Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before (no CVSS) - [CVE-2013-0747](https://cve.now/CVE-2013-0747.md): The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird be (no CVSS) - [CVE-2013-0748](https://cve.now/CVE-2013-0748.md): The XBL.\_\_proto\_\_.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbir (no CVSS) - [CVE-2013-0749](https://cve.now/CVE-2013-0749.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird befor (no CVSS) - [CVE-2013-0750](https://cve.now/CVE-2013-0750.md): Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Th (no CVSS) - [CVE-2013-0751](https://cve.now/CVE-2013-0751.md): Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remo (no CVSS) - [CVE-2013-0752](https://cve.now/CVE-2013-0752.md): Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey be (no CVSS) - [CVE-2013-0753](https://cve.now/CVE-2013-0753.md): Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox (no CVSS) - [CVE-2013-0754](https://cve.now/CVE-2013-0754.md): Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x (no CVSS) - [CVE-2013-0755](https://cve.now/CVE-2013-0755.md): Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before (no CVSS) - [CVE-2013-0756](https://cve.now/CVE-2013-0756.md): Use-after-free vulnerability in the obj\_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before (no CVSS) - [CVE-2013-0757](https://cve.now/CVE-2013-0757.md): The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Th (no CVSS) - [CVE-2013-0758](https://cve.now/CVE-2013-0758.md): Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before (no CVSS) - [CVE-2013-0759](https://cve.now/CVE-2013-0759.md): Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before (no CVSS) - [CVE-2013-0760](https://cve.now/CVE-2013-0760.md): Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMo (no CVSS) - [CVE-2013-0761](https://cve.now/CVE-2013-0761.md): Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x befo (no CVSS) - [CVE-2013-0762](https://cve.now/CVE-2013-0762.md): Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17. (no CVSS) - [CVE-2013-0763](https://cve.now/CVE-2013-0763.md): Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x (no CVSS) - [CVE-2013-0764](https://cve.now/CVE-2013-0764.md): The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Th (no CVSS) - [CVE-2013-0766](https://cve.now/CVE-2013-0766.md): Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x (no CVSS) - [CVE-2013-0767](https://cve.now/CVE-2013-0767.md): The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Th (no CVSS) - [CVE-2013-0768](https://cve.now/CVE-2013-0768.md): Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before (no CVSS) - [CVE-2013-0769](https://cve.now/CVE-2013-0769.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 1 (no CVSS) - [CVE-2013-0770](https://cve.now/CVE-2013-0770.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2 (no CVSS) - [CVE-2013-0771](https://cve.now/CVE-2013-0771.md): Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-01-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.