CVE-2012-4185 Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2...
HighCVSS 9.3
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 10.0.8 | 10.0.8 |
| mozilla Firefox | < 16.0 | 16.0 |
| mozilla thunderbird esr | < 10.0.8 | 10.0.8 |
| mozilla Thunderbird | < 16.0 | 16.0 |
| mozilla seamonkey | < 2.13 | 2.13 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.3 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise sdk | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
References
- SUSE-SU-2012:1351 mailing-list third-party-advisory vendor-advisory
- 86116 broken-link vdb-entry
- RHSA-2012:1351 third-party-advisory vendor-advisory
- 50856 third-party-advisory
- 50892 third-party-advisory
- 50904 third-party-advisory
- 50935 third-party-advisory
- 50936 third-party-advisory
- 50984 third-party-advisory
- 55318 third-party-advisory
- MDVSA-2012:163 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- 56127 third-party-advisory vdb-entry
- USN-1611-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- firefox-nschartraitslength-bo(79162) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:16009 signature third-party-advisory vdb-entry