10

CVE-2012-3983

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 16.0
Mozilla ≫ Seamonkey Version < 2.13
Mozilla ≫ Thunderbird Version < 16.0
Canonical ≫ Ubuntu Linux Version10.04
Canonical ≫ Ubuntu Linux Version11.04
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Suse ≫ Linux Enterprise Desktop Version10 Updatesp4 SwEdition-
Suse ≫ Linux Enterprise Desktop Version11 Updatesp2
Suse ≫ Linux Enterprise Server Version10 Updatesp4 SwEdition-
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatform-
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatformvmware
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.31% 0.915
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/50856
Broken Link
http://secunia.com/advisories/50892
Broken Link
http://secunia.com/advisories/50904
Broken Link
http://secunia.com/advisories/50935
Broken Link
http://secunia.com/advisories/50984
Broken Link
http://secunia.com/advisories/55318
Broken Link
http://www.mozilla.org/security/announce/2012/mfsa2012-74.html
Vendor Advisory
http://www.ubuntu.com/usn/USN-1611-1
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=634444
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=762920
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=768313
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=790865
Vendor Advisory
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16901
Third Party Advisory