CVE-2012-0444

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
mozillafirefox
𝑥
< 3.6.26
mozillafirefox
4.0 ≤
𝑥
< 10.0
mozillaseamonkey
𝑥
< 2.7
mozillathunderbird
𝑥
< 3.1.18
mozillathunderbird
5.0 ≤
𝑥
< 10.0
debiandebian_linux
5.0
debiandebian_linux
6.0
opensuseopensuse
11.4
canonicalubuntu_linux
10.04
canonicalubuntu_linux
10.10
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libvorbis
bookworm
1.3.7-1
fixed
bullseye
1.3.7-1
fixed
squeeze
no-dsa
lenny
not-affected
sid
1.3.7-2
fixed
trixie
1.3.7-2
fixed
libvorbisidec
bookworm
1.2.1+git20180316-7
fixed
bullseye
1.2.1+git20180316-7
fixed
squeeze
no-dsa
lenny
not-affected
sid
1.2.1+git20180316-8
fixed
trixie
1.2.1+git20180316-8
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
Fixed 10.0+build1-0ubuntu0.11.10.1
released
natty
Fixed 10.0+build1-0ubuntu0.11.04.1
released
maverick
Fixed 10.0+build1-0ubuntu0.10.10.1
released
lucid
Fixed 10.0+build1-0ubuntu0.10.04.2
released
hardy
ignored
libvorbis
saucy
Fixed 1.3.2-1ubuntu3
released
raring
Fixed 1.3.2-1ubuntu3
released
quantal
Fixed 1.3.2-1ubuntu3
released
precise
Fixed 1.3.2-1ubuntu3
released
oneiric
Fixed 1.3.2-1ubuntu2.1
released
natty
Fixed 1.3.2-1ubuntu1.1
released
maverick
Fixed 1.3.1-1ubuntu0.1
released
lucid
Fixed 1.2.3-3ubuntu1.1
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
Fixed 10.0.2+build1-0ubuntu0.11.10.1
released
natty
Fixed 3.1.18+build2+nobinonly-0ubuntu0.11.04.1
released
maverick
Fixed 3.1.18+build2+nobinonly-0ubuntu0.10.10.1
released
lucid
Fixed 3.1.18+build2+nobinonly-0ubuntu0.10.04.1
released
hardy
ignored
xulrunner-1.9.2
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
Fixed 1.9.2.27+build1+nobinonly-0ubuntu0.11.04.1
released
maverick
Fixed 1.9.2.26+build2+nobinonly-0ubuntu0.10.10.1
released
lucid
Fixed 1.9.2.26+build2+nobinonly-0ubuntu0.10.04.1
released
hardy
ignored
xulrunner-2.0
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
ignored
maverick
dne
lucid
dne
hardy
dne
References