9.3

CVE-2012-3995

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 10.0.8
Mozilla ≫ Thunderbird Esr Version < 10.0.8
Mozilla ≫ Firefox Version < 16.0
Mozilla ≫ Thunderbird Version < 16.0
Mozilla ≫ Seamonkey Version < 2.13
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version11.04
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Redhat ≫ Enterprise Linux Eus Version6.3
Suse ≫ Linux Enterprise Desktop Version10 Updatesp4
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Suse ≫ Linux Enterprise Sdk Version10 Updatesp4
Suse ≫ Linux Enterprise Server Version10 Updatesp4
Suse ≫ Linux Enterprise Server Version11 Updatesp3
Suse ≫ Linux Enterprise Server Version11 Updatesp3 SwPlatformvmware
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.02% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://rhn.redhat.com/errata/RHSA-2012-1351.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
Third Party Advisory
http://secunia.com/advisories/50856
Third Party Advisory
http://secunia.com/advisories/50892
Third Party Advisory
http://secunia.com/advisories/50904
Third Party Advisory
http://secunia.com/advisories/50935
Third Party Advisory
http://secunia.com/advisories/50936
Third Party Advisory
http://secunia.com/advisories/50984
Third Party Advisory
http://secunia.com/advisories/55318
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163
Third Party Advisory
http://www.ubuntu.com/usn/USN-1611-1
Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-85.html
Vendor Advisory
http://www.securityfocus.com/bid/56136
Third Party Advisory
VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=765621
Vendor Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/79156
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808
Third Party Advisory