Mozilla Foundation Security Advisory 2013-25
Announced: February 19, 2013
Reporter: Frederik Braun
Products: Firefox, Thunderbird, SeaMonkey
Fixed in: Firefox 19.0
Firefox ESR 17.0.3
Thunderbird ESR 17.0.3
In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.