CVE-2012-0442 — Out-of-bounds Write in Mozilla Firefox

11 documents6 sources
Severity
9.3CRITICALNVD
EPSS
1.4%
top 19.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird+5 more
Timeline
PublishedFeb 1
Latest updateMay 4

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages7 packages

▶NVDmozilla/firefox4.0 — 10.0+1
▶NVDmozilla/thunderbird5.0 — 10.0+1

Also affects: Debian Linux 5.0, 6.0

Patches

Patch: bugzilla.mozilla.org ↗Patch: bugzilla.mozilla.org ↗Patch: bugzilla.mozilla.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-mgq7-pc7j-7mm4: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3↗2022-05-04
▶
CVEList
CVE-2012-0442: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3↗2012-02-01
▶

📋Vendor Advisories

7
Ubuntu
Thunderbird vulnerabilities↗2012-02-17
▶
Ubuntu
Thunderbird vulnerabilities↗2012-02-08
▶
Ubuntu
Xulrunnner vulnerabilities↗2012-02-08
▶
Ubuntu
Mozvoikko update↗2012-02-03
▶
Ubuntu
ubufox and webfav update↗2012-02-03
▶

💬Community

1
Bugzilla
CVE-2012-0442 Mozilla: memory safety hazards in 10.0/1.9.2.26 (MFSA 2012-01)↗2012-01-27
▶
CVE-2012-0442 — Out-of-bounds Write in Mozilla Firefox | cvebase