CVE-2012-4183

EUVD-2012-4127
Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
< 10.0.8
mozillathunderbird_esr
𝑥
< 10.0.8
mozillafirefox
𝑥
< 16.0
mozillathunderbird
𝑥
< 16.0
mozillaseamonkey
𝑥
< 2.13
canonicalubuntu_linux
10.04
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
canonicalubuntu_linux
12.04
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.3
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
opensuseopensuse
11.4
opensuseopensuse
12.3
opensuseopensuse
13.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 16.0+build1-0ubuntu0.10.04.1
released
natty
Fixed 16.0+build1-0ubuntu0.11.04.1
released
oneiric
Fixed 16.0+build1-0ubuntu0.11.10.1
released
precise
Fixed 16.0+build1-0ubuntu0.12.04.1
released
quantal
Fixed 16.0+build1-0ubuntu1
released
raring
Fixed 16.0+build1-0ubuntu1
released
saucy
Fixed 16.0+build1-0ubuntu1
released
seamonkey
hardy
ignored
lucid
ignored
natty
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
thunderbird
hardy
ignored
lucid
Fixed 16.0+build1-0ubuntu0.10.04.1
released
natty
Fixed 16.0+build1-0ubuntu0.11.04.1
released
oneiric
Fixed 16.0+build1-0ubuntu0.11.10.1
released
precise
Fixed 16.0+build1-0ubuntu0.12.04.1
released
quantal
Fixed 16.0.1+build1-0ubuntu1
released
raring
Fixed 16.0.1+build1-0ubuntu1
released
saucy
Fixed 16.0.1+build1-0ubuntu1
released
xulrunner-1.9.2
hardy
ignored
lucid
ignored
natty
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
References