CVEvulnerability
CVE-2012-0449
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
Affected configurations
• mozilla firefox (< 3.6.26)
• mozilla firefox (>= 4.0 < 10.0)
• mozilla seamonkey (< 2.7)
• mozilla thunderbird (< 3.1.18)
• mozilla thunderbird (>= 5.0 < 10.0)
• debian debian linux 5.0
• debian debian linux 6.0
• opensuse opensuse 11.4
• suse linux enterprise desktop 10
• suse linux enterprise desktop 11
• suse linux enterprise server 10
• suse linux enterprise server 11
• suse linux enterprise software development kit 10
• suse linux enterprise software development kit 11
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html Mailing List, Third Party Advisory
- http://www.debian.org/security/2012/dsa-2400 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2402 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2406 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 Third Party Advisory
- http://www.mozilla.org/security/announce/2012/mfsa2012-08.html Vendor Advisory
- http://www.securityfocus.com/bid/51754 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=701806 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=702466 Issue Tracking, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72868 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14618 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html Mailing List, Third Party Advisory
- http://www.debian.org/security/2012/dsa-2400 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2402 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2406 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 Third Party Advisory
- http://www.mozilla.org/security/announce/2012/mfsa2012-08.html Vendor Advisory
- http://www.securityfocus.com/bid/51754 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=701806 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=702466 Issue Tracking, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72868 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14618 Third Party Advisory