PT-2012-6331 · Mozilla+3 · Firefox+5
Regenrecht
·
Publicado
1970-01-01
·
Atualizado
2024-12-12
·
CVE-2012-0444
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 4.x through 9.0
Mozilla Firefox version 3.6.26 and earlier
Thunderbird versions 5.0 through 9.0
Thunderbird version 3.1.18 and earlier
SeaMonkey version 2.7 and earlier
Description
The issue is related to the improper initialization of nsChildView data structures, which can be exploited by remote attackers using a crafted Ogg Vorbis file. This can lead to a denial of service, memory corruption, and application crash, or possibly the execution of arbitrary code. The vulnerability can be exploited remotely and may affect the confidentiality, integrity, and availability of protected information.
Recommendations
For Mozilla Firefox versions 4.x through 9.0, update to a version later than 9.0.
For Mozilla Firefox version 3.6.26 and earlier, update to a version later than 3.6.26.
For Thunderbird versions 5.0 through 9.0, update to a version later than 9.0.
For Thunderbird version 3.1.18 and earlier, update to a version later than 3.1.18.
For SeaMonkey version 2.7 and earlier, update to a version later than 2.7.
Exploit
Correção
DoS
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Firefox
Red Hat
Seamonkey
Suse
Thunderbird