CVE-2012-3105 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Seamonkey

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer10 documents5 sources
Severity
9.3CRITICALNVD
CNA10.0
EPSS
3.2%
top 12.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Mozilla SeamonkeyMozilla FirefoxMozilla Thunderbird+1 more
Timeline
PublishedJun 5
Latest updateMay 17

Description

The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages4 packages

▶NVDmozilla/firefox20 versions+19
▶NVDmozilla/thunderbird16 versions+15
▶NVDmozilla/thunderbird_esr5 versions+4
▶NVDmozilla/seamonkey2.9+64

🔴Vulnerability Details

4
GHSA
GHSA-7p2c-gjhf-hwwv: The glBufferData function in the WebGL implementation in Mozilla Firefox 4↗2022-05-17
▶
GHSA
GHSA-26x4-q5xq-8jvc: Google Chrome before 19↗2022-05-14
▶
CVEList
CVE-2012-3105: The glBufferData function in the WebGL implementation in Mozilla Firefox 4↗2012-06-05
▶
CVEList
CVE-2011-3101: Google Chrome before 19↗2012-05-16
▶

📋Vendor Advisories

2
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)↗2012-06-05
▶
Red Hat
Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)↗2012-06-05
▶

💬Community

3
Bugzilla
CVE-2011-3101 CVE-2012-1937 CVE-2012-1938 CVE-2012-1939 CVE-2012-3105 Mozilla: Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5) (MFSA 2012-34)↗2012-06-03
▶
Bugzilla
CVE-2011-3105 webkitgtk: Use-after-free in first-letter handling↗2012-05-29
▶
Bugzilla
Webkitgtk: google chrome update [23-May-2012]↗2012-05-29
▶
CVE-2012-3105 — Mozilla Seamonkey vulnerability | cvebase