Vulnerability-Lookup

RHSA-2012_1210

Vulnerability from csaf_redhat - Published: 2012-08-29 04:38 - Updated: 2024-12-08 10:36

Summary

Red Hat Security Advisory: firefox security update

Severity

Critical

Notes

Topic: Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-1970, CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960, CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964) A web page containing a malicious Scalable Vector Graphics (SVG) image file could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-3969, CVE-2012-3970) Two flaws were found in the way Firefox rendered certain images using WebGL. A web page containing malicious content could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-3967, CVE-2012-3968) A flaw was found in the way Firefox decoded embedded bitmap images in Icon Format (ICO) files. A web page containing a malicious ICO file could cause Firefox to crash or, under certain conditions, possibly execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-3966) A flaw was found in the way the "eval" command was handled by the Firefox Web Console. Running "eval" in the Web Console while viewing a web page containing malicious content could possibly cause Firefox to execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-3980) An out-of-bounds memory read flaw was found in the way Firefox used the format-number feature of XSLT (Extensible Stylesheet Language Transformations). A web page containing malicious content could possibly cause an information leak, or cause Firefox to crash. (CVE-2012-3972) It was found that the SSL certificate information for a previously visited site could be displayed in the address bar while the main window displayed a new page. This could lead to phishing attacks as attackers could use this flaw to trick users into believing they are viewing a trusted site. (CVE-2012-3976) A flaw was found in the location object implementation in Firefox. Malicious content could use this flaw to possibly allow restricted content to be loaded. (CVE-2012-3978) For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 10.0.7 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Gary Kwong, Christian Holler, Jesse Ruderman, John Schoenick, Vladimir Vukicevic, Daniel Holbert, Abhishek Arya, Frédéric Hoguin, miaubiz, Arthur Gerkis, Nicolas Grégoire, Mark Poticha, moz_bug_r_a4, and Colby Russell as the original reporters of these issues. All Firefox users should upgrade to these updated packages, which contain Firefox version 10.0.7 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2012-1970

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products

Product	Version	Remediation
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.7-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.7-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.7-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.7-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.7-1.el6_3.x86_64	—	Vendor Fix fix

Threats

Impact Critical

CVE-2012-1972

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-1973

Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-1974

Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-1975

Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-1976

Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3956

Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3957

Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3958

Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3959

Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3960

Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3961

Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3962

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3963

Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3964

Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3966

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3967

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3968

Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a fragment shader by its accessor.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3969

Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3970

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Critical

CVE-2012-3972

The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read.

5.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Moderate

CVE-2012-3976

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Moderate

CVE-2012-3978

The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Moderate

CVE-2012-3980

The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1970

Threats

Impact Important

References

95 references

URL	Category
https://access.redhat.com/errata/RHSA-2012:1210	self
https://access.redhat.com/security/updates/classi…	external
http://www.mozilla.org/security/known-vulnerabili…	external
https://bugzilla.redhat.com/show_bug.cgi?id=851909	external
https://bugzilla.redhat.com/show_bug.cgi?id=851910	external
https://bugzilla.redhat.com/show_bug.cgi?id=851918	external
https://bugzilla.redhat.com/show_bug.cgi?id=851920	external
https://bugzilla.redhat.com/show_bug.cgi?id=851922	external
https://bugzilla.redhat.com/show_bug.cgi?id=851924	external
https://bugzilla.redhat.com/show_bug.cgi?id=851931	external
https://bugzilla.redhat.com/show_bug.cgi?id=851937	external
https://bugzilla.redhat.com/show_bug.cgi?id=851939	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2012-1970	self
https://bugzilla.redhat.com/show_bug.cgi?id=851909	external
https://www.cve.org/CVERecord?id=CVE-2012-1970	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1970	external
https://access.redhat.com/security/cve/CVE-2012-1972	self
https://bugzilla.redhat.com/show_bug.cgi?id=851910	external
https://www.cve.org/CVERecord?id=CVE-2012-1972	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1972	external
https://access.redhat.com/security/cve/CVE-2012-1973	self
https://www.cve.org/CVERecord?id=CVE-2012-1973	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1973	external
https://access.redhat.com/security/cve/CVE-2012-1974	self
https://www.cve.org/CVERecord?id=CVE-2012-1974	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1974	external
https://access.redhat.com/security/cve/CVE-2012-1975	self
https://www.cve.org/CVERecord?id=CVE-2012-1975	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1975	external
https://access.redhat.com/security/cve/CVE-2012-1976	self
https://www.cve.org/CVERecord?id=CVE-2012-1976	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1976	external
https://access.redhat.com/security/cve/CVE-2012-3956	self
https://www.cve.org/CVERecord?id=CVE-2012-3956	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3956	external
https://access.redhat.com/security/cve/CVE-2012-3957	self
https://www.cve.org/CVERecord?id=CVE-2012-3957	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3957	external
https://access.redhat.com/security/cve/CVE-2012-3958	self
https://www.cve.org/CVERecord?id=CVE-2012-3958	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3958	external
https://access.redhat.com/security/cve/CVE-2012-3959	self
https://www.cve.org/CVERecord?id=CVE-2012-3959	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3959	external
https://access.redhat.com/security/cve/CVE-2012-3960	self
https://www.cve.org/CVERecord?id=CVE-2012-3960	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3960	external
https://access.redhat.com/security/cve/CVE-2012-3961	self
https://www.cve.org/CVERecord?id=CVE-2012-3961	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3961	external
https://access.redhat.com/security/cve/CVE-2012-3962	self
https://www.cve.org/CVERecord?id=CVE-2012-3962	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3962	external
https://access.redhat.com/security/cve/CVE-2012-3963	self
https://www.cve.org/CVERecord?id=CVE-2012-3963	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3963	external
https://access.redhat.com/security/cve/CVE-2012-3964	self
https://www.cve.org/CVERecord?id=CVE-2012-3964	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3964	external
https://access.redhat.com/security/cve/CVE-2012-3966	self
https://bugzilla.redhat.com/show_bug.cgi?id=851918	external
https://www.cve.org/CVERecord?id=CVE-2012-3966	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3966	external
https://access.redhat.com/security/cve/CVE-2012-3967	self
https://bugzilla.redhat.com/show_bug.cgi?id=851920	external
https://www.cve.org/CVERecord?id=CVE-2012-3967	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3967	external
https://access.redhat.com/security/cve/CVE-2012-3968	self
https://www.cve.org/CVERecord?id=CVE-2012-3968	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3968	external
https://access.redhat.com/security/cve/CVE-2012-3969	self
https://bugzilla.redhat.com/show_bug.cgi?id=851922	external
https://www.cve.org/CVERecord?id=CVE-2012-3969	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3969	external
https://access.redhat.com/security/cve/CVE-2012-3970	self
https://www.cve.org/CVERecord?id=CVE-2012-3970	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3970	external
https://access.redhat.com/security/cve/CVE-2012-3972	self
https://bugzilla.redhat.com/show_bug.cgi?id=851924	external
https://www.cve.org/CVERecord?id=CVE-2012-3972	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3972	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2012-3976	self
https://bugzilla.redhat.com/show_bug.cgi?id=851931	external
https://www.cve.org/CVERecord?id=CVE-2012-3976	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3976	external
https://access.redhat.com/security/cve/CVE-2012-3978	self
https://bugzilla.redhat.com/show_bug.cgi?id=851937	external
https://www.cve.org/CVERecord?id=CVE-2012-3978	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3978	external
https://access.redhat.com/security/cve/CVE-2012-3980	self
https://bugzilla.redhat.com/show_bug.cgi?id=851939	external
https://www.cve.org/CVERecord?id=CVE-2012-3980	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3980	external

Acknowledgments

Mozilla project

Mark Poticha

moz_bug_r_a4

Colby Russell

JSON

To clipboard

Loading 1.6 MB of JSON…

CVE-2012-1970 (GCVE-0-2012-1970)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.mozilla.org/show_bug.cgi?id=758408	x_refsource_CONFIRM
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=745158	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/55266	vdb-entryx_refsource_BID
https://bugzilla.mozilla.org/show_bug.cgi?id=778765	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.mozilla.org/show_bug.cgi?id=775206	x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=777806	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.mozilla.org/show_bug.cgi?id=764176	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.mozilla.org/show_bug.cgi?id=761831	x_refsource_CONFIRM
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.261Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758408"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-57.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=745158"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "name": "55266",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55266"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=778765"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "oval:org.mitre.oval:def:16910",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16910"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775206"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=777806"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764176"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758408"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-57.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=745158"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "name": "55266",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55266"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=778765"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "oval:org.mitre.oval:def:16910",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16910"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775206"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=777806"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764176"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1970",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=758408",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758408"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-57.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-57.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=745158",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=745158"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "55266",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55266"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=778765",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=778765"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "oval:org.mitre.oval:def:16910",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16910"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=775206",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775206"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=777806",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=777806"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=764176",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764176"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=761831",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761831"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1970",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.261Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1972 (GCVE-0-2012-1972)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=778428	x_refsource_CONFIRM
http://www.securityfocus.com/bid/55314	vdb-entryx_refsource_BID
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.296Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=778428"
          },
          {
            "name": "55314",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55314"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17017",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17017"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=778428"
        },
        {
          "name": "55314",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55314"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17017",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17017"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1972",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=778428",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=778428"
            },
            {
              "name": "55314",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55314"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17017",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17017"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1972",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.296Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1973 (GCVE-0-2012-1973)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=773207	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/55316	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.077Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=773207"
          },
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "name": "oval:org.mitre.oval:def:17045",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17045"
          },
          {
            "name": "55316",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55316"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=773207"
        },
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "name": "oval:org.mitre.oval:def:17045",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17045"
        },
        {
          "name": "55316",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55316"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1973",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=773207",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=773207"
            },
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "oval:org.mitre.oval:def:17045",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17045"
            },
            {
              "name": "55316",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55316"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1973",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.077Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1974 (GCVE-0-2012-1974)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/55317	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.mozilla.org/show_bug.cgi?id=769303	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.098Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:17015",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015"
          },
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "name": "55317",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55317"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=769303"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:17015",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015"
        },
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "name": "55317",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55317"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=769303"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1974",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:17015",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015"
            },
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "55317",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55317"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=769303",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=769303"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1974",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.098Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1975 (GCVE-0-2012-1975)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.mozilla.org/show_bug.cgi?id=777578	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/55318	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.624Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=777578"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "name": "55318",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55318"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17040",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=777578"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "name": "55318",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55318"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17040",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1975",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=777578",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=777578"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "55318",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55318"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17040",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17040"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1975",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1976 (GCVE-0-2012-1976)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=776213	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/55319	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.410Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=776213"
          },
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "name": "55319",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55319"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "name": "oval:org.mitre.oval:def:16818",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16818"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=776213"
        },
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "name": "55319",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55319"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "name": "oval:org.mitre.oval:def:16818",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16818"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1976",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=776213",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=776213"
            },
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "55319",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55319"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "oval:org.mitre.oval:def:16818",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16818"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1976",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.410Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3956 (GCVE-0-2012-3956)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/55320	vdb-entryx_refsource_BID
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=774597	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.051Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "name": "55320",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=774597"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16997",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16997"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "name": "55320",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=774597"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16997",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16997"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3956",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "55320",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55320"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=774597",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=774597"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16997",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16997"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3956",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3957 (GCVE-0-2012-3957)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/55341	vdb-entryx_refsource_BID
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=774548	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.192Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "name": "55341",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55341"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=774548"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "oval:org.mitre.oval:def:16940",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16940"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "name": "55341",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55341"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=774548"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "oval:org.mitre.oval:def:16940",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16940"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3957",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "55341",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55341"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=774548",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=774548"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "oval:org.mitre.oval:def:16940",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16940"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3957",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3958 (GCVE-0-2012-3958)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=772346	x_refsource_CONFIRM
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/55323	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.452Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16782",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16782"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=772346"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "55323",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55323"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16782",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16782"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=772346"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "55323",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55323"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3958",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16782",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16782"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=772346",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=772346"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "55323",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55323"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3958",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.452Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3959 (GCVE-0-2012-3959)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.debian.org/security/2012/dsa-2556	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.mozilla.org/show_bug.cgi?id=771994	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2012-1211.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/55324	vdb-entryx_refsource_BID
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2553	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2012-1210.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2012/dsa-2554	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.xerox.com/download/security/security-b…	x_refsource_CONFIRM

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.157Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16805",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16805"
          },
          {
            "name": "DSA-2556",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2556"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=771994"
          },
          {
            "name": "RHSA-2012:1211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
          },
          {
            "name": "55324",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55324"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
          },
          {
            "name": "DSA-2553",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2553"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "RHSA-2012:1210",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "DSA-2554",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2554"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16805",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16805"
        },
        {
          "name": "DSA-2556",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2556"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=771994"
        },
        {
          "name": "RHSA-2012:1211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
        },
        {
          "name": "55324",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55324"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
        },
        {
          "name": "DSA-2553",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2553"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "RHSA-2012:1210",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "DSA-2554",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2554"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3959",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16805",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16805"
            },
            {
              "name": "DSA-2556",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2556"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=771994",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=771994"
            },
            {
              "name": "RHSA-2012:1211",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1211.html"
            },
            {
              "name": "55324",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55324"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-58.html"
            },
            {
              "name": "DSA-2553",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2553"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "RHSA-2012:1210",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1210.html"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "DSA-2554",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2554"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            },
            {
              "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3959",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.157Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2012_1210

CVE-2012-1970 (GCVE-0-2012-1970)

CVE-2012-1972 (GCVE-0-2012-1972)

CVE-2012-1973 (GCVE-0-2012-1973)

CVE-2012-1974 (GCVE-0-2012-1974)

CVE-2012-1975 (GCVE-0-2012-1975)

CVE-2012-1976 (GCVE-0-2012-1976)

CVE-2012-3956 (GCVE-0-2012-3956)

CVE-2012-3957 (GCVE-0-2012-3957)

CVE-2012-3958 (GCVE-0-2012-3958)

CVE-2012-3959 (GCVE-0-2012-3959)

Tags

Sightings

Nomenclature

Related by attack behaviour