9.3
CVE-2012-0442
- EPSS 4.6%
- Veröffentlicht 01.02.2012 16:55:00
- Zuletzt bearbeitet 16.06.2026 23:37:16
- Erkennungen
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird Version < 3.1.18
Mozilla ≫ Thunderbird Version >= 5.0 < 10.0
Debian ≫ Debian Linux Version 5.0
Debian ≫ Debian Linux Version 6.0
Suse ≫ Linux Enterprise Desktop Version 10 Update sp4
Suse ≫ Linux Enterprise Desktop Version 11 Update sp1
Suse ≫ Linux Enterprise Server Version 10 Update sp4
Suse ≫ Linux Enterprise Server Version 11 Update sp1
Suse ≫ Linux Enterprise Server Version 11 Update sp1 SwPlatform vmware
Suse ≫ Linux Enterprise Software Development Kit Version 10 Update sp4
Suse ≫ Linux Enterprise Software Development Kit Version 11 Update sp1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.6% | 0.904 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
http://www.mandriva.com/security/advisories?name=MDVSA-2012:013
http://www.debian.org/security/2012/dsa-2400
http://www.debian.org/security/2012/dsa-2402
http://www.debian.org/security/2012/dsa-2406
http://www.mozilla.org/security/announce/2012/mfsa2012-01.html
https://bugzilla.mozilla.org/show_bug.cgi?id=693399
https://bugzilla.mozilla.org/show_bug.cgi?id=705347
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14678