CVE-2012-0468 The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corrup...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 4.0 | No fix listed |
| mozilla Firefox | = 4.0-beta1 | No fix listed |
| mozilla Firefox | = 4.0-beta10 | No fix listed |
| mozilla Firefox | = 4.0-beta11 | No fix listed |
| mozilla Firefox | = 4.0-beta12 | No fix listed |
| mozilla Firefox | = 4.0-beta2 | No fix listed |
| mozilla Firefox | = 4.0-beta3 | No fix listed |
| mozilla Firefox | = 4.0-beta4 | No fix listed |
| mozilla Firefox | = 4.0-beta5 | No fix listed |
| mozilla Firefox | = 4.0-beta6 | No fix listed |
| mozilla Firefox | = 4.0-beta7 | No fix listed |
| mozilla Firefox | = 4.0-beta8 | No fix listed |
| mozilla Firefox | = 4.0-beta9 | No fix listed |
| mozilla Firefox | = 4.0.1 | No fix listed |
| mozilla Firefox | = 5.0 | No fix listed |
| mozilla Firefox | = 5.0.1 | No fix listed |
| mozilla Firefox | = 6.0 | No fix listed |
| mozilla Firefox | = 6.0.1 | No fix listed |
| mozilla Firefox | = 6.0.2 | No fix listed |
| mozilla Firefox | = 7.0 | No fix listed |
| mozilla Firefox | = 7.0.1 | No fix listed |
| mozilla Firefox | = 8.0 | No fix listed |
| mozilla Firefox | = 8.0.1 | No fix listed |
| mozilla Firefox | = 9.0 | No fix listed |
| mozilla Firefox | = 9.0.1 | No fix listed |
Show 132 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 10.0 | No fix listed |
| mozilla Firefox | = 10.0.1 | No fix listed |
| mozilla Firefox | = 10.0.2 | No fix listed |
| mozilla Firefox | = 11.0 | No fix listed |
| mozilla Thunderbird | = 5.0 | No fix listed |
| mozilla Thunderbird | = 6.0 | No fix listed |
| mozilla Thunderbird | = 6.0.1 | No fix listed |
| mozilla Thunderbird | = 6.0.2 | No fix listed |
| mozilla Thunderbird | = 7.0 | No fix listed |
| mozilla Thunderbird | = 7.0.1 | No fix listed |
| mozilla Thunderbird | = 8.0 | No fix listed |
| mozilla Thunderbird | = 9.0 | No fix listed |
| mozilla Thunderbird | = 9.0.1 | No fix listed |
| mozilla Thunderbird | = 10.0 | No fix listed |
| mozilla Thunderbird | = 10.0.1 | No fix listed |
| mozilla Thunderbird | = 10.0.2 | No fix listed |
| mozilla Thunderbird | = 10.0.3 | No fix listed |
| mozilla Thunderbird | = 10.0.4 | No fix listed |
| mozilla Thunderbird | = 11.0 | No fix listed |
| mozilla seamonkey | <= 2.9 | No fix listed |
| mozilla seamonkey | = 1.0 | No fix listed |
| mozilla seamonkey | = 1.0-alpha | No fix listed |
| mozilla seamonkey | = 1.0-beta | No fix listed |
| mozilla seamonkey | = 1.0.1 | No fix listed |
| mozilla seamonkey | = 1.0.2 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.5 | No fix listed |
| mozilla seamonkey | = 1.0.6 | No fix listed |
| mozilla seamonkey | = 1.0.7 | No fix listed |
| mozilla seamonkey | = 1.0.8 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.1 | No fix listed |
| mozilla seamonkey | = 1.1-alpha | No fix listed |
| mozilla seamonkey | = 1.1-beta | No fix listed |
| mozilla seamonkey | = 1.1.1 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla seamonkey | = 1.1.3 | No fix listed |
| mozilla seamonkey | = 1.1.4 | No fix listed |
| mozilla seamonkey | = 1.1.5 | No fix listed |
| mozilla seamonkey | = 1.1.6 | No fix listed |
| mozilla seamonkey | = 1.1.7 | No fix listed |
| mozilla seamonkey | = 1.1.8 | No fix listed |
| mozilla seamonkey | = 1.1.9 | No fix listed |
| mozilla seamonkey | = 1.1.10 | No fix listed |
| mozilla seamonkey | = 1.1.11 | No fix listed |
| mozilla seamonkey | = 1.1.12 | No fix listed |
| mozilla seamonkey | = 1.1.13 | No fix listed |
| mozilla seamonkey | = 1.1.14 | No fix listed |
| mozilla seamonkey | = 1.1.15 | No fix listed |
| mozilla seamonkey | = 1.1.16 | No fix listed |
| mozilla seamonkey | = 1.1.17 | No fix listed |
| mozilla seamonkey | = 1.1.18 | No fix listed |
| mozilla seamonkey | = 1.1.19 | No fix listed |
| mozilla seamonkey | = 1.5.0.8 | No fix listed |
| mozilla seamonkey | = 1.5.0.9 | No fix listed |
| mozilla seamonkey | = 1.5.0.10 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0.6 | No fix listed |
| mozilla seamonkey | = 2.0.7 | No fix listed |
| mozilla seamonkey | = 2.0.8 | No fix listed |
| mozilla seamonkey | = 2.0.9 | No fix listed |
| mozilla seamonkey | = 2.0.10 | No fix listed |
| mozilla seamonkey | = 2.0.11 | No fix listed |
| mozilla seamonkey | = 2.0.12 | No fix listed |
| mozilla seamonkey | = 2.0.13 | No fix listed |
| mozilla seamonkey | = 2.0.14 | No fix listed |
| mozilla seamonkey | = 2.1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha2 | No fix listed |
| mozilla seamonkey | = 2.1-alpha3 | No fix listed |
| mozilla seamonkey | = 2.1-beta1 | No fix listed |
| mozilla seamonkey | = 2.1-beta2 | No fix listed |
| mozilla seamonkey | = 2.1-beta3 | No fix listed |
| mozilla seamonkey | = 2.1-rc1 | No fix listed |
| mozilla seamonkey | = 2.1-rc2 | No fix listed |
| mozilla seamonkey | = 2.2 | No fix listed |
| mozilla seamonkey | = 2.2-beta1 | No fix listed |
| mozilla seamonkey | = 2.2-beta2 | No fix listed |
| mozilla seamonkey | = 2.2-beta3 | No fix listed |
| mozilla seamonkey | = 2.3 | No fix listed |
| mozilla seamonkey | = 2.3-beta1 | No fix listed |
| mozilla seamonkey | = 2.3-beta2 | No fix listed |
| mozilla seamonkey | = 2.3-beta3 | No fix listed |
| mozilla seamonkey | = 2.3.1 | No fix listed |
| mozilla seamonkey | = 2.3.2 | No fix listed |
| mozilla seamonkey | = 2.3.3 | No fix listed |
| mozilla seamonkey | = 2.4 | No fix listed |
| mozilla seamonkey | = 2.4-beta1 | No fix listed |
| mozilla seamonkey | = 2.4-beta2 | No fix listed |
| mozilla seamonkey | = 2.4-beta3 | No fix listed |
| mozilla seamonkey | = 2.4.1 | No fix listed |
| mozilla seamonkey | = 2.5 | No fix listed |
| mozilla seamonkey | = 2.5-beta1 | No fix listed |
| mozilla seamonkey | = 2.5-beta2 | No fix listed |
| mozilla seamonkey | = 2.5-beta3 | No fix listed |
| mozilla seamonkey | = 2.5-beta4 | No fix listed |
| mozilla seamonkey | = 2.6 | No fix listed |
| mozilla seamonkey | = 2.6-beta1 | No fix listed |
| mozilla seamonkey | = 2.6-beta2 | No fix listed |
| mozilla seamonkey | = 2.6-beta3 | No fix listed |
| mozilla seamonkey | = 2.6-beta4 | No fix listed |
| mozilla seamonkey | = 2.6.1 | No fix listed |
| mozilla seamonkey | = 2.7 | No fix listed |
| mozilla seamonkey | = 2.7-beta1 | No fix listed |
| mozilla seamonkey | = 2.7-beta2 | No fix listed |
| mozilla seamonkey | = 2.7-beta3 | No fix listed |
| mozilla seamonkey | = 2.7-beta4 | No fix listed |
| mozilla seamonkey | = 2.7-beta5 | No fix listed |
| mozilla seamonkey | = 2.7.1 | No fix listed |
| mozilla seamonkey | = 2.7.2 | No fix listed |
| mozilla seamonkey | = 2.8 | No fix listed |
| mozilla seamonkey | = 2.8-beta1 | No fix listed |
| mozilla seamonkey | = 2.8-beta2 | No fix listed |
| mozilla seamonkey | = 2.8-beta3 | No fix listed |
| mozilla seamonkey | = 2.8-beta4 | No fix listed |
| mozilla seamonkey | = 2.8-beta5 | No fix listed |
| mozilla seamonkey | = 2.8-beta6 | No fix listed |
| mozilla seamonkey | = 2.9-beta1 | No fix listed |
| mozilla seamonkey | = 2.9-beta2 | No fix listed |
References
- 48972 third-party-advisory
- 49047 third-party-advisory
- 49055 third-party-advisory
- MDVSA-2012:066 vendor-advisory
- MDVSA-2012:081 vendor-advisory
- www.mozilla.org vendor-advisory
- 53221 vdb-entry
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:16771 signature vdb-entry