CVE-2012-0442 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote at...
HighCVSS 9.3
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 3.6.26 | 3.6.26 |
| mozilla Firefox | >= 4.0, < 10.0 | 10.0 |
| mozilla seamonkey | < 2.7 | 2.7 |
| mozilla Thunderbird | < 3.1.18 | 3.1.18 |
| mozilla Thunderbird | >= 5.0, < 10.0 | 10.0 |
| debian linux | = 5.0 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 10-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp1 | No fix listed |
References
- SUSE-SU-2012:0198 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0221 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:0234 mailing-list third-party-advisory vendor-advisory
- DSA-2400 third-party-advisory vendor-advisory
- DSA-2402 third-party-advisory vendor-advisory
- DSA-2406 third-party-advisory vendor-advisory
- MDVSA-2012:013 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- oval:org.mitre.oval:def:14678 signature third-party-advisory vdb-entry