CVE-2012-4212 Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code...
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 17.0 | 17.0 |
| mozilla seamonkey | < 2.14 | 2.14 |
| mozilla Thunderbird | < 17.0 | 17.0 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| opensuse | = 12.2 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp2 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
References
- SUSE-SU-2012:1592 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0175 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:1583 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:1585 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:1586 mailing-list third-party-advisory vendor-advisory
- 51369 broken-link third-party-advisory
- 51370 broken-link third-party-advisory
- 51381 broken-link third-party-advisory
- 51434 broken-link third-party-advisory
- 51439 broken-link third-party-advisory
- 51440 broken-link third-party-advisory
- www.mozilla.org vendor-advisory
- 56630 third-party-advisory vdb-entry
- USN-1636-1 third-party-advisory vendor-advisory
- USN-1638-1 third-party-advisory vendor-advisory
- USN-1638-2 third-party-advisory vendor-advisory
- USN-1638-3 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- oval:org.mitre.oval:def:15993 signature third-party-advisory vdb-entry