PT-2012-3671 · Mozilla+3 · Thunderbird+7
Inferno
·
Published
2012-06-05
·
Updated
2024-10-21
·
CVE-2012-1940
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 4.x through 12.0
Firefox ESR versions 10.x before 10.0.5
Thunderbird versions 5.0 through 12.0
Thunderbird ESR versions 10.x before 10.0.5
SeaMonkey versions prior to 2.10
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in heap memory corruption and application crash. This is achieved by changing the size of a container of absolutely positioned elements in a column, exploiting a use-after-free vulnerability in the
nsFrameList::FirstChild function.Recommendations
For Mozilla Firefox versions 4.x through 12.0, update to a version after 12.0.
For Firefox ESR versions 10.x before 10.0.5, update to version 10.0.5 or later.
For Thunderbird versions 5.0 through 12.0, update to a version after 12.0.
For Thunderbird ESR versions 10.x before 10.0.5, update to version 10.0.5 or later.
For SeaMonkey versions prior to 2.10, update to version 2.10 or later.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Firefox Esr
Firefox
Red Hat
Seamonkey
Suse
Thunderbird
Thunderbird Esr