CVE-2012-1970Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

Severity
10.0CRITICALNVD
EPSS
0.9%
top 24.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 29
Latest updateMay 13

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages11 packages

NVDmozilla/firefox10.010.0.7+1
NVDmozilla/thunderbird_esr10.010.0.7
NVDmozilla/seamonkey< 2.12

Also affects: Debian Linux 6.0, 7.0, Ubuntu Linux 10.04, 11.04, 11.10, 12.04, Enterprise Linux 6.3

🔴Vulnerability Details

2
GHSA
GHSA-24gf-j9ch-cj9r: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 152022-05-13
CVEList
CVE-2012-1970: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 152012-08-29

💥Exploits & PoCs

1
Exploit-DB
WordPress Plugin Age Verification 0.4 - Open Redirect2012-01-10

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities2012-08-30
Ubuntu
Firefox vulnerabilities2012-08-29
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7) (MFSA 2012-57)2012-08-28

💬Community

1
Bugzilla
CVE-2012-1970 Mozilla: Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7) (MFSA 2012-57)2012-08-27
CVE-2012-1970 — Mozilla Firefox vulnerability | cvebase