5

CVE-2012-0456

The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 3.6.27
Mozilla ≫ Firefox Version >= 4.0 <= 10.0
Mozilla ≫ Firefox Version 10.0
Mozilla ≫ Firefox Version 10.0.1
Mozilla ≫ Firefox Version 10.0.2
Mozilla ≫ Thunderbird Version >= 1.0 <= 3.1.19
Mozilla ≫ Thunderbird Version > 5.0 <= 10.0
Mozilla ≫ Thunderbird Esr Version 10.0
Mozilla ≫ Thunderbird Esr Version 10.0.1
Mozilla ≫ Thunderbird Esr Version 10.0.2
Mozilla ≫ Seamonkey Version -
Mozilla ≫ Seamonkey Version 1.0
Mozilla ≫ Seamonkey Version 1.0 Update alpha
Mozilla ≫ Seamonkey Version 1.0 Update beta
Mozilla ≫ Seamonkey Version 1.0.1
Mozilla ≫ Seamonkey Version 1.0.2
Mozilla ≫ Seamonkey Version 1.0.3
Mozilla ≫ Seamonkey Version 1.0.4
Mozilla ≫ Seamonkey Version 1.0.5
Mozilla ≫ Seamonkey Version 1.0.6
Mozilla ≫ Seamonkey Version 1.0.7
Mozilla ≫ Seamonkey Version 1.0.8
Mozilla ≫ Seamonkey Version 1.0.9
Mozilla ≫ Seamonkey Version 1.1
Mozilla ≫ Seamonkey Version 1.1 Update alpha
Mozilla ≫ Seamonkey Version 1.1 Update beta
Mozilla ≫ Seamonkey Version 1.1.1
Mozilla ≫ Seamonkey Version 1.1.2
Mozilla ≫ Seamonkey Version 1.1.3
Mozilla ≫ Seamonkey Version 1.1.4
Mozilla ≫ Seamonkey Version 1.1.5
Mozilla ≫ Seamonkey Version 1.1.6
Mozilla ≫ Seamonkey Version 1.1.7
Mozilla ≫ Seamonkey Version 1.1.8
Mozilla ≫ Seamonkey Version 1.1.9
Mozilla ≫ Seamonkey Version 1.1.10
Mozilla ≫ Seamonkey Version 1.1.11
Mozilla ≫ Seamonkey Version 1.1.12
Mozilla ≫ Seamonkey Version 1.1.13
Mozilla ≫ Seamonkey Version 1.1.14
Mozilla ≫ Seamonkey Version 1.1.15
Mozilla ≫ Seamonkey Version 1.1.16
Mozilla ≫ Seamonkey Version 1.1.17
Mozilla ≫ Seamonkey Version 1.1.18
Mozilla ≫ Seamonkey Version 1.1.19
Mozilla ≫ Seamonkey Version 1.5.0.8
Mozilla ≫ Seamonkey Version 1.5.0.9
Mozilla ≫ Seamonkey Version 1.5.0.10
Mozilla ≫ Seamonkey Version 2.0
Mozilla ≫ Seamonkey Version 2.0 Update alpha_1
Mozilla ≫ Seamonkey Version 2.0 Update alpha_2
Mozilla ≫ Seamonkey Version 2.0 Update alpha_3
Mozilla ≫ Seamonkey Version 2.0 Update beta_1
Mozilla ≫ Seamonkey Version 2.0 Update beta_2
Mozilla ≫ Seamonkey Version 2.0 Update rc1
Mozilla ≫ Seamonkey Version 2.0 Update rc2
Mozilla ≫ Seamonkey Version 2.0.1
Mozilla ≫ Seamonkey Version 2.0.2
Mozilla ≫ Seamonkey Version 2.0.3
Mozilla ≫ Seamonkey Version 2.0.4
Mozilla ≫ Seamonkey Version 2.0.5
Mozilla ≫ Seamonkey Version 2.0.6
Mozilla ≫ Seamonkey Version 2.0.7
Mozilla ≫ Seamonkey Version 2.0.8
Mozilla ≫ Seamonkey Version 2.0.9
Mozilla ≫ Seamonkey Version 2.0.10
Mozilla ≫ Seamonkey Version 2.0.11
Mozilla ≫ Seamonkey Version 2.0.12
Mozilla ≫ Seamonkey Version 2.0.13
Mozilla ≫ Seamonkey Version 2.0.14
Mozilla ≫ Seamonkey Version 2.1
Mozilla ≫ Seamonkey Version 2.1 Update alpha1
Mozilla ≫ Seamonkey Version 2.1 Update alpha2
Mozilla ≫ Seamonkey Version 2.1 Update alpha3
Mozilla ≫ Seamonkey Version 2.1 Update beta1
Mozilla ≫ Seamonkey Version 2.1 Update beta2
Mozilla ≫ Seamonkey Version 2.1 Update beta3
Mozilla ≫ Seamonkey Version 2.1 Update rc1
Mozilla ≫ Seamonkey Version 2.1 Update rc2
Mozilla ≫ Seamonkey Version 2.2
Mozilla ≫ Seamonkey Version 2.2 Update beta1
Mozilla ≫ Seamonkey Version 2.2 Update beta2
Mozilla ≫ Seamonkey Version 2.2 Update beta3
Mozilla ≫ Seamonkey Version 2.3
Mozilla ≫ Seamonkey Version 2.3 Update beta1
Mozilla ≫ Seamonkey Version 2.3 Update beta2
Mozilla ≫ Seamonkey Version 2.3 Update beta3
Mozilla ≫ Seamonkey Version 2.3.1
Mozilla ≫ Seamonkey Version 2.3.2
Mozilla ≫ Seamonkey Version 2.3.3
Mozilla ≫ Seamonkey Version 2.4
Mozilla ≫ Seamonkey Version 2.4 Update beta1
Mozilla ≫ Seamonkey Version 2.4 Update beta2
Mozilla ≫ Seamonkey Version 2.4 Update beta3
Mozilla ≫ Seamonkey Version 2.4.1
Mozilla ≫ Seamonkey Version 2.5
Mozilla ≫ Seamonkey Version 2.5 Update beta1
Mozilla ≫ Seamonkey Version 2.5 Update beta2
Mozilla ≫ Seamonkey Version 2.5 Update beta3
Mozilla ≫ Seamonkey Version 2.5 Update beta4
Mozilla ≫ Seamonkey Version 2.6
Mozilla ≫ Seamonkey Version 2.6 Update beta1
Mozilla ≫ Seamonkey Version 2.6 Update beta2
Mozilla ≫ Seamonkey Version 2.6 Update beta3
Mozilla ≫ Seamonkey Version 2.6 Update beta4
Mozilla ≫ Seamonkey Version 2.6.1
Mozilla ≫ Seamonkey Version 2.7
Mozilla ≫ Seamonkey Version 2.7 Update beta1
Mozilla ≫ Seamonkey Version 2.7 Update beta2
Mozilla ≫ Seamonkey Version 2.7 Update beta3
Mozilla ≫ Seamonkey Version 2.7 Update beta4
Mozilla ≫ Seamonkey Version 2.7 Update beta5
Mozilla ≫ Seamonkey Version 2.7.1
Mozilla ≫ Seamonkey Version 2.7.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.66% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
Third Party Advisory
http://secunia.com/advisories/48495
Third Party Advisory
http://secunia.com/advisories/48553
Third Party Advisory
http://secunia.com/advisories/48823
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:031
http://www.ubuntu.com/usn/USN-1401-1
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
http://rhn.redhat.com/errata/RHSA-2012-0387.html
http://rhn.redhat.com/errata/RHSA-2012-0388.html
http://secunia.com/advisories/48359
http://secunia.com/advisories/48402
http://secunia.com/advisories/48496
Third Party Advisory
http://secunia.com/advisories/48513
Third Party Advisory
http://secunia.com/advisories/48561
Third Party Advisory
http://secunia.com/advisories/48629
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032
http://www.securitytracker.com/id?1026801
http://www.securitytracker.com/id?1026803
http://www.securitytracker.com/id?1026804
http://www.ubuntu.com/usn/USN-1400-1
http://www.ubuntu.com/usn/USN-1400-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-3
Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-4
Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-5
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html
http://secunia.com/advisories/48414
http://secunia.com/advisories/48624
Third Party Advisory
http://secunia.com/advisories/48920
Third Party Advisory
http://www.debian.org/security/2012/dsa-2433
Third Party Advisory
http://www.debian.org/security/2012/dsa-2458
http://www.mozilla.org/security/announce/2012/mfsa2012-14.html
Third Party Advisory
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=711653
Vendor Advisory
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007
Third Party Advisory