CVE-2012-0478 The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonke...
HighCVSS 9.3
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 4.0 | No fix listed |
| mozilla Firefox | = 4.0-beta1 | No fix listed |
| mozilla Firefox | = 4.0-beta10 | No fix listed |
| mozilla Firefox | = 4.0-beta11 | No fix listed |
| mozilla Firefox | = 4.0-beta12 | No fix listed |
| mozilla Firefox | = 4.0-beta2 | No fix listed |
| mozilla Firefox | = 4.0-beta3 | No fix listed |
| mozilla Firefox | = 4.0-beta4 | No fix listed |
| mozilla Firefox | = 4.0-beta5 | No fix listed |
| mozilla Firefox | = 4.0-beta6 | No fix listed |
| mozilla Firefox | = 4.0-beta7 | No fix listed |
| mozilla Firefox | = 4.0-beta8 | No fix listed |
| mozilla Firefox | = 4.0-beta9 | No fix listed |
| mozilla Firefox | = 4.0.1 | No fix listed |
| mozilla Firefox | = 5.0 | No fix listed |
| mozilla Firefox | = 5.0.1 | No fix listed |
| mozilla Firefox | = 6.0 | No fix listed |
| mozilla Firefox | = 6.0.1 | No fix listed |
| mozilla Firefox | = 6.0.2 | No fix listed |
| mozilla Firefox | = 7.0 | No fix listed |
| mozilla Firefox | = 7.0.1 | No fix listed |
| mozilla Firefox | = 8.0 | No fix listed |
| mozilla Firefox | = 8.0.1 | No fix listed |
| mozilla Firefox | = 9.0 | No fix listed |
| mozilla Firefox | = 9.0.1 | No fix listed |
Show 137 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 10.0 | No fix listed |
| mozilla Firefox | = 10.0.1 | No fix listed |
| mozilla Firefox | = 10.0.2 | No fix listed |
| mozilla Firefox | = 11.0 | No fix listed |
| mozilla Firefox | = 10.0.3 | No fix listed |
| mozilla Thunderbird | = 5.0 | No fix listed |
| mozilla Thunderbird | = 6.0 | No fix listed |
| mozilla Thunderbird | = 6.0.1 | No fix listed |
| mozilla Thunderbird | = 6.0.2 | No fix listed |
| mozilla Thunderbird | = 7.0 | No fix listed |
| mozilla Thunderbird | = 7.0.1 | No fix listed |
| mozilla Thunderbird | = 8.0 | No fix listed |
| mozilla Thunderbird | = 9.0 | No fix listed |
| mozilla Thunderbird | = 9.0.1 | No fix listed |
| mozilla Thunderbird | = 10.0 | No fix listed |
| mozilla Thunderbird | = 10.0.1 | No fix listed |
| mozilla Thunderbird | = 10.0.2 | No fix listed |
| mozilla Thunderbird | = 10.0.3 | No fix listed |
| mozilla Thunderbird | = 10.0.4 | No fix listed |
| mozilla Thunderbird | = 11.0 | No fix listed |
| mozilla thunderbird esr | = 10.0 | No fix listed |
| mozilla thunderbird esr | = 10.0.1 | No fix listed |
| mozilla thunderbird esr | = 10.0.2 | No fix listed |
| mozilla thunderbird esr | = 10.0.3 | No fix listed |
| mozilla seamonkey | <= 2.9 | No fix listed |
| mozilla seamonkey | = 1.0 | No fix listed |
| mozilla seamonkey | = 1.0-alpha | No fix listed |
| mozilla seamonkey | = 1.0-beta | No fix listed |
| mozilla seamonkey | = 1.0.1 | No fix listed |
| mozilla seamonkey | = 1.0.2 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.5 | No fix listed |
| mozilla seamonkey | = 1.0.6 | No fix listed |
| mozilla seamonkey | = 1.0.7 | No fix listed |
| mozilla seamonkey | = 1.0.8 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.1 | No fix listed |
| mozilla seamonkey | = 1.1-alpha | No fix listed |
| mozilla seamonkey | = 1.1-beta | No fix listed |
| mozilla seamonkey | = 1.1.1 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla seamonkey | = 1.1.3 | No fix listed |
| mozilla seamonkey | = 1.1.4 | No fix listed |
| mozilla seamonkey | = 1.1.5 | No fix listed |
| mozilla seamonkey | = 1.1.6 | No fix listed |
| mozilla seamonkey | = 1.1.7 | No fix listed |
| mozilla seamonkey | = 1.1.8 | No fix listed |
| mozilla seamonkey | = 1.1.9 | No fix listed |
| mozilla seamonkey | = 1.1.10 | No fix listed |
| mozilla seamonkey | = 1.1.11 | No fix listed |
| mozilla seamonkey | = 1.1.12 | No fix listed |
| mozilla seamonkey | = 1.1.13 | No fix listed |
| mozilla seamonkey | = 1.1.14 | No fix listed |
| mozilla seamonkey | = 1.1.15 | No fix listed |
| mozilla seamonkey | = 1.1.16 | No fix listed |
| mozilla seamonkey | = 1.1.17 | No fix listed |
| mozilla seamonkey | = 1.1.18 | No fix listed |
| mozilla seamonkey | = 1.1.19 | No fix listed |
| mozilla seamonkey | = 1.5.0.8 | No fix listed |
| mozilla seamonkey | = 1.5.0.9 | No fix listed |
| mozilla seamonkey | = 1.5.0.10 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0.6 | No fix listed |
| mozilla seamonkey | = 2.0.7 | No fix listed |
| mozilla seamonkey | = 2.0.8 | No fix listed |
| mozilla seamonkey | = 2.0.9 | No fix listed |
| mozilla seamonkey | = 2.0.10 | No fix listed |
| mozilla seamonkey | = 2.0.11 | No fix listed |
| mozilla seamonkey | = 2.0.12 | No fix listed |
| mozilla seamonkey | = 2.0.13 | No fix listed |
| mozilla seamonkey | = 2.0.14 | No fix listed |
| mozilla seamonkey | = 2.1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha2 | No fix listed |
| mozilla seamonkey | = 2.1-alpha3 | No fix listed |
| mozilla seamonkey | = 2.1-beta1 | No fix listed |
| mozilla seamonkey | = 2.1-beta2 | No fix listed |
| mozilla seamonkey | = 2.1-beta3 | No fix listed |
| mozilla seamonkey | = 2.1-rc1 | No fix listed |
| mozilla seamonkey | = 2.1-rc2 | No fix listed |
| mozilla seamonkey | = 2.2 | No fix listed |
| mozilla seamonkey | = 2.2-beta1 | No fix listed |
| mozilla seamonkey | = 2.2-beta2 | No fix listed |
| mozilla seamonkey | = 2.2-beta3 | No fix listed |
| mozilla seamonkey | = 2.3 | No fix listed |
| mozilla seamonkey | = 2.3-beta1 | No fix listed |
| mozilla seamonkey | = 2.3-beta2 | No fix listed |
| mozilla seamonkey | = 2.3-beta3 | No fix listed |
| mozilla seamonkey | = 2.3.1 | No fix listed |
| mozilla seamonkey | = 2.3.2 | No fix listed |
| mozilla seamonkey | = 2.3.3 | No fix listed |
| mozilla seamonkey | = 2.4 | No fix listed |
| mozilla seamonkey | = 2.4-beta1 | No fix listed |
| mozilla seamonkey | = 2.4-beta2 | No fix listed |
| mozilla seamonkey | = 2.4-beta3 | No fix listed |
| mozilla seamonkey | = 2.4.1 | No fix listed |
| mozilla seamonkey | = 2.5 | No fix listed |
| mozilla seamonkey | = 2.5-beta1 | No fix listed |
| mozilla seamonkey | = 2.5-beta2 | No fix listed |
| mozilla seamonkey | = 2.5-beta3 | No fix listed |
| mozilla seamonkey | = 2.5-beta4 | No fix listed |
| mozilla seamonkey | = 2.6 | No fix listed |
| mozilla seamonkey | = 2.6-beta1 | No fix listed |
| mozilla seamonkey | = 2.6-beta2 | No fix listed |
| mozilla seamonkey | = 2.6-beta3 | No fix listed |
| mozilla seamonkey | = 2.6-beta4 | No fix listed |
| mozilla seamonkey | = 2.6.1 | No fix listed |
| mozilla seamonkey | = 2.7 | No fix listed |
| mozilla seamonkey | = 2.7-beta1 | No fix listed |
| mozilla seamonkey | = 2.7-beta2 | No fix listed |
| mozilla seamonkey | = 2.7-beta3 | No fix listed |
| mozilla seamonkey | = 2.7-beta4 | No fix listed |
| mozilla seamonkey | = 2.7-beta5 | No fix listed |
| mozilla seamonkey | = 2.7.1 | No fix listed |
| mozilla seamonkey | = 2.7.2 | No fix listed |
| mozilla seamonkey | = 2.8 | No fix listed |
| mozilla seamonkey | = 2.8-beta1 | No fix listed |
| mozilla seamonkey | = 2.8-beta2 | No fix listed |
| mozilla seamonkey | = 2.8-beta3 | No fix listed |
| mozilla seamonkey | = 2.8-beta4 | No fix listed |
| mozilla seamonkey | = 2.8-beta5 | No fix listed |
| mozilla seamonkey | = 2.8-beta6 | No fix listed |
| mozilla seamonkey | = 2.9-beta1 | No fix listed |
| mozilla seamonkey | = 2.9-beta2 | No fix listed |
References
- 48972 third-party-advisory
- 49047 third-party-advisory
- 49055 third-party-advisory
- MDVSA-2012:066 vendor-advisory
- MDVSA-2012:081 vendor-advisory
- www.mozilla.org vendor-advisory
- 53227 vdb-entry
- bugzilla.mozilla.org
- firefox-teximage2d-dos(75155) vdb-entry
- oval:org.mitre.oval:def:16893 signature vdb-entry