CVE-2012-0449 Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and ap...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 3.6.26 | 3.6.26 |
| mozilla Firefox | >= 4.0, < 10.0 | 10.0 |
| mozilla seamonkey | < 2.7 | 2.7 |
| mozilla Thunderbird | < 3.1.18 | 3.1.18 |
| mozilla Thunderbird | >= 5.0, < 10.0 | 10.0 |
| debian linux | = 5.0 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 10-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp1 | No fix listed |
References
- SUSE-SU-2012:0198 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0221 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:0234 mailing-list third-party-advisory vendor-advisory
- DSA-2400 third-party-advisory vendor-advisory
- DSA-2402 third-party-advisory vendor-advisory
- DSA-2406 third-party-advisory vendor-advisory
- MDVSA-2012:013 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- 51754 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- mozilla-xsltstylesheets-code-execution(72868) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14618 signature third-party-advisory vdb-entry