CVE-2012-1938 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memor...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 13.0 | 13.0 |
| mozilla seamonkey | < 2.10 | 2.10 |
| mozilla Thunderbird | < 13.0 | 13.0 |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 10-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp1 | No fix listed |
| redhat storage | = 2.0 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.2 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 6.2 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- SUSE-SU-2012:0746 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:0760 mailing-list third-party-advisory vendor-advisory
- RHSA-2012:0710 third-party-advisory vendor-advisory
- RHSA-2012:0715 third-party-advisory vendor-advisory
- MDVSA-2012:088 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- 53796 third-party-advisory vdb-entry
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- bugzilla.mozilla.org issue-tracking patch vendor-advisory
- oval:org.mitre.oval:def:17058 signature third-party-advisory vdb-entry