CVE-2012-0449
01.02.2012, 16:55
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 3.6.26 |
| mozilla | firefox | 4.0 ≤ 𝑥 < 10.0 |
| mozilla | seamonkey | 𝑥 < 2.7 |
| mozilla | thunderbird | 𝑥 < 3.1.18 |
| mozilla | thunderbird | 5.0 ≤ 𝑥 < 10.0 |
| debian | debian_linux | 5.0 |
| debian | debian_linux | 6.0 |
| opensuse | opensuse | 11.4 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||
| seamonkey |
| ||||||||||||||||||
| thunderbird |
| ||||||||||||||||||
| xulrunner-1.9.2 |
| ||||||||||||||||||
| xulrunner-2.0 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MozillaFirefox |
| ||||||||||||||||
| MozillaFirefox-devel |
| ||||||||||||||||
| MozillaFirefox-translations-common |
| ||||||||||||||||
| MozillaFirefox-translations-other |
| ||||||||||||||||
| MozillaThunderbird |
| ||||||||||||||||
| MozillaThunderbird-devel |
| ||||||||||||||||
| MozillaThunderbird-translations-common |
| ||||||||||||||||
| MozillaThunderbird-translations-other |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References