CVE-2012-1974

Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
mozillafirefox
𝑥
< 15.0
mozillafirefox
10.0 ≤
𝑥
< 10.0.7
mozillaseamonkey
𝑥
< 2.12
mozillathunderbird
𝑥
< 15.0
mozillathunderbird_esr
10.0 ≤
𝑥
< 10.0.7
opensuseopensuse
12.2
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.3
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_eus
6.3
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
debiandebian_linux
6.0
debiandebian_linux
7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
Fixed 15.0+build1-0ubuntu1
released
raring
Fixed 15.0+build1-0ubuntu1
released
quantal
Fixed 15.0+build1-0ubuntu1
released
precise
Fixed 15.0+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 15.0+build1-0ubuntu0.11.10.1
released
natty
Fixed 15.0+build1-0ubuntu0.11.04.2
released
lucid
Fixed 15.0+build1-0ubuntu0.10.04.1
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
natty
ignored
lucid
ignored
hardy
ignored
thunderbird
saucy
Fixed 15.0+build1-0ubuntu1
released
raring
Fixed 15.0+build1-0ubuntu1
released
quantal
Fixed 15.0+build1-0ubuntu1
released
precise
Fixed 15.0+build1-0ubuntu0.12.04.1
released
oneiric
Fixed 15.0+build1-0ubuntu0.11.10.1
released
natty
Fixed 15.0+build1-0ubuntu0.11.04.1
released
lucid
Fixed 15.0+build1-0ubuntu0.10.04.1
released
hardy
ignored
xulrunner-1.9.2
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
ignored
lucid
ignored
hardy
ignored
xulrunner-2.0
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
ignored
lucid
dne
hardy
dne
References