CVE-2012-1952 The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11...
HighCVSS 9.3
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 4.0 | No fix listed |
| mozilla Firefox | = 4.0-beta1 | No fix listed |
| mozilla Firefox | = 4.0-beta10 | No fix listed |
| mozilla Firefox | = 4.0-beta11 | No fix listed |
| mozilla Firefox | = 4.0-beta12 | No fix listed |
| mozilla Firefox | = 4.0-beta2 | No fix listed |
| mozilla Firefox | = 4.0-beta3 | No fix listed |
| mozilla Firefox | = 4.0-beta4 | No fix listed |
| mozilla Firefox | = 4.0-beta5 | No fix listed |
| mozilla Firefox | = 4.0-beta6 | No fix listed |
| mozilla Firefox | = 4.0-beta7 | No fix listed |
| mozilla Firefox | = 4.0-beta8 | No fix listed |
| mozilla Firefox | = 4.0-beta9 | No fix listed |
| mozilla Firefox | = 4.0.1 | No fix listed |
| mozilla Firefox | = 5.0 | No fix listed |
| mozilla Firefox | = 5.0.1 | No fix listed |
| mozilla Firefox | = 6.0 | No fix listed |
| mozilla Firefox | = 6.0.1 | No fix listed |
| mozilla Firefox | = 6.0.2 | No fix listed |
| mozilla Firefox | = 7.0 | No fix listed |
| mozilla Firefox | = 7.0.1 | No fix listed |
| mozilla Firefox | = 8.0 | No fix listed |
| mozilla Firefox | = 8.0.1 | No fix listed |
| mozilla Firefox | = 9.0 | No fix listed |
| mozilla Firefox | = 9.0.1 | No fix listed |
Show 102 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 11.0 | No fix listed |
| mozilla Firefox | = 12.0 | No fix listed |
| mozilla Firefox | = 12.0-beta6 | No fix listed |
| mozilla Firefox | = 13.0 | No fix listed |
| mozilla Firefox | = 10.0 | No fix listed |
| mozilla Firefox | = 10.0.1 | No fix listed |
| mozilla Firefox | = 10.0.2 | No fix listed |
| mozilla Firefox | = 10.0.3 | No fix listed |
| mozilla Firefox | = 10.0.4 | No fix listed |
| mozilla Firefox | = 10.0.5 | No fix listed |
| mozilla Thunderbird | = 5.0 | No fix listed |
| mozilla Thunderbird | = 6.0 | No fix listed |
| mozilla Thunderbird | = 6.0.1 | No fix listed |
| mozilla Thunderbird | = 6.0.2 | No fix listed |
| mozilla Thunderbird | = 7.0 | No fix listed |
| mozilla Thunderbird | = 7.0.1 | No fix listed |
| mozilla Thunderbird | = 8.0 | No fix listed |
| mozilla Thunderbird | = 9.0 | No fix listed |
| mozilla Thunderbird | = 9.0.1 | No fix listed |
| mozilla Thunderbird | = 10.0 | No fix listed |
| mozilla Thunderbird | = 10.0.1 | No fix listed |
| mozilla Thunderbird | = 10.0.2 | No fix listed |
| mozilla Thunderbird | = 10.0.3 | No fix listed |
| mozilla Thunderbird | = 10.0.4 | No fix listed |
| mozilla Thunderbird | = 11.0 | No fix listed |
| mozilla Thunderbird | = 12.0 | No fix listed |
| mozilla Thunderbird | = 13.0 | No fix listed |
| mozilla thunderbird esr | = 10.0 | No fix listed |
| mozilla thunderbird esr | = 10.0.1 | No fix listed |
| mozilla thunderbird esr | = 10.0.2 | No fix listed |
| mozilla thunderbird esr | = 10.0.3 | No fix listed |
| mozilla thunderbird esr | = 10.0.4 | No fix listed |
| mozilla thunderbird esr | = 10.0.5 | No fix listed |
| mozilla seamonkey | <= 2.10 | No fix listed |
| mozilla seamonkey | = 1.0 | No fix listed |
| mozilla seamonkey | = 1.0-alpha | No fix listed |
| mozilla seamonkey | = 1.0-beta | No fix listed |
| mozilla seamonkey | = 1.0.1 | No fix listed |
| mozilla seamonkey | = 1.0.2 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.5 | No fix listed |
| mozilla seamonkey | = 1.0.6 | No fix listed |
| mozilla seamonkey | = 1.0.7 | No fix listed |
| mozilla seamonkey | = 1.0.8 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.1 | No fix listed |
| mozilla seamonkey | = 1.1-alpha | No fix listed |
| mozilla seamonkey | = 1.1-beta | No fix listed |
| mozilla seamonkey | = 1.1.1 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla seamonkey | = 1.1.3 | No fix listed |
| mozilla seamonkey | = 1.1.4 | No fix listed |
| mozilla seamonkey | = 1.1.5 | No fix listed |
| mozilla seamonkey | = 1.1.6 | No fix listed |
| mozilla seamonkey | = 1.1.7 | No fix listed |
| mozilla seamonkey | = 1.1.8 | No fix listed |
| mozilla seamonkey | = 1.1.9 | No fix listed |
| mozilla seamonkey | = 1.1.10 | No fix listed |
| mozilla seamonkey | = 1.1.11 | No fix listed |
| mozilla seamonkey | = 1.1.12 | No fix listed |
| mozilla seamonkey | = 1.1.13 | No fix listed |
| mozilla seamonkey | = 1.1.14 | No fix listed |
| mozilla seamonkey | = 1.1.15 | No fix listed |
| mozilla seamonkey | = 1.1.16 | No fix listed |
| mozilla seamonkey | = 1.1.17 | No fix listed |
| mozilla seamonkey | = 1.1.18 | No fix listed |
| mozilla seamonkey | = 1.1.19 | No fix listed |
| mozilla seamonkey | = 1.5.0.8 | No fix listed |
| mozilla seamonkey | = 1.5.0.9 | No fix listed |
| mozilla seamonkey | = 1.5.0.10 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0.6 | No fix listed |
| mozilla seamonkey | = 2.0.7 | No fix listed |
| mozilla seamonkey | = 2.0.8 | No fix listed |
| mozilla seamonkey | = 2.0.9 | No fix listed |
| mozilla seamonkey | = 2.0.10 | No fix listed |
| mozilla seamonkey | = 2.0.11 | No fix listed |
| mozilla seamonkey | = 2.0.12 | No fix listed |
| mozilla seamonkey | = 2.0.13 | No fix listed |
| mozilla seamonkey | = 2.0.14 | No fix listed |
| mozilla seamonkey | = 2.1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha1 | No fix listed |
| mozilla seamonkey | = 2.1-alpha2 | No fix listed |
| mozilla seamonkey | = 2.1-alpha3 | No fix listed |
| mozilla seamonkey | = 2.1-beta1 | No fix listed |
| mozilla seamonkey | = 2.1-beta2 | No fix listed |
| mozilla seamonkey | = 2.1-beta3 | No fix listed |
| mozilla seamonkey | = 2.1-rc1 | No fix listed |
| mozilla seamonkey | = 2.1-rc2 | No fix listed |
References
- SUSE-SU-2012:0895 vendor-advisory
- SUSE-SU-2012:0896 vendor-advisory
- openSUSE-SU-2012:0899 vendor-advisory
- openSUSE-SU-2012:0917 vendor-advisory
- 83999 vdb-entry
- RHSA-2012:1088 vendor-advisory
- 49965 third-party-advisory
- 49968 third-party-advisory
- 49972 third-party-advisory
- 49977 third-party-advisory
- 49979 third-party-advisory
- 49992 third-party-advisory
- 49993 third-party-advisory
- 49994 third-party-advisory
- www.mozilla.org vendor-advisory
- 54578 vdb-entry
- 1027256 vdb-entry
- 1027257 vdb-entry
- 1027258 vdb-entry
- USN-1509-1 vendor-advisory
- USN-1509-2 vendor-advisory
- USN-1510-1 vendor-advisory
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:16942 signature vdb-entry