CVE-2012-1938

EUVD-2012-1947
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 13.0
mozillaseamonkey
𝑥
< 2.10
mozillathunderbird
𝑥
< 13.0
opensuseopensuse
11.4
opensuseopensuse
12.1
redhatstorage
2.0
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.2
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
6.2
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 13.0+build1-0ubuntu0.10.04.1
released
natty
Fixed 13.0+build1-0ubuntu0.11.04.1
released
oneiric
Fixed 13.0+build1-0ubuntu0.11.10.1
released
precise
Fixed 13.0+build1-0ubuntu0.12.04.1
released
quantal
not-affected
raring
not-affected
saucy
not-affected
seamonkey
hardy
ignored
lucid
ignored
natty
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
thunderbird
hardy
ignored
lucid
Fixed 13.0.1+build1-0ubuntu0.10.04.1
released
natty
Fixed 13.0.1+build1-0ubuntu0.11.04.1
released
oneiric
Fixed 13.0.1+build1-0ubuntu0.11.10.1
released
precise
Fixed 13.0.1+build1-0ubuntu0.12.04.1
released
quantal
not-affected
raring
not-affected
saucy
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
ignored
natty
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
xulrunner-2.0
hardy
dne
lucid
dne
natty
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
References