CVE-2012-4186 Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, an...
HighCVSS 9.3
EPSS 14.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 10.0.8 | 10.0.8 |
| mozilla Firefox | < 16.0 | 16.0 |
| mozilla thunderbird esr | < 10.0.8 | 10.0.8 |
| mozilla Thunderbird | < 16.0 | 16.0 |
| mozilla seamonkey | < 2.13 | 2.13 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.3 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise sdk | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
References
- SUSE-SU-2012:1351 mailing-list third-party-advisory vendor-advisory
- 86117 broken-link vdb-entry
- RHSA-2012:1351 third-party-advisory vendor-advisory
- 50856 third-party-advisory
- 50892 third-party-advisory
- 50904 third-party-advisory
- 50935 third-party-advisory
- 50936 third-party-advisory
- 50984 third-party-advisory
- 51181 third-party-advisory
- 55318 third-party-advisory
- DSA-2565 third-party-advisory vendor-advisory
- DSA-2569 third-party-advisory vendor-advisory
- DSA-2572 third-party-advisory vendor-advisory
- MDVSA-2012:163 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- USN-1611-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking
- firefox-nswavereader-bo(79163) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:16193 signature third-party-advisory vdb-entry