CVEvulnerability
CVE-2012-0456
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.
Affected configurations
• mozilla firefox (<= 3.6.27)
• mozilla firefox (>= 4.0 <= 10.0)
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla thunderbird (>= 1.0 <= 3.1.19)
• mozilla thunderbird (> 5.0 <= 10.0)
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla seamonkey
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla seamonkey 2.0.8
• mozilla seamonkey 2.0.9
• mozilla seamonkey 2.0.10
• mozilla seamonkey 2.0.11
• mozilla seamonkey 2.0.12
• mozilla seamonkey 2.0.13
• mozilla seamonkey 2.0.14
• mozilla seamonkey 2.1
… and 13 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0387.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0388.html rhn.redhat.com
- http://secunia.com/advisories/48359 secunia.com
- http://secunia.com/advisories/48402 secunia.com
- http://secunia.com/advisories/48414 secunia.com
- http://secunia.com/advisories/48495 Third Party Advisory
- http://secunia.com/advisories/48496 Third Party Advisory
- http://secunia.com/advisories/48513 Third Party Advisory
- http://secunia.com/advisories/48553 Third Party Advisory
- http://secunia.com/advisories/48561 Third Party Advisory
- http://secunia.com/advisories/48624 Third Party Advisory
- http://secunia.com/advisories/48629 Third Party Advisory
- http://secunia.com/advisories/48823 Third Party Advisory
- http://secunia.com/advisories/48920 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2433 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2458 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-14.html Third Party Advisory, Vendor Advisory
- http://www.securitytracker.com/id?1026801 www.securitytracker.com
- http://www.securitytracker.com/id?1026803 www.securitytracker.com
- http://www.securitytracker.com/id?1026804 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1400-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-2 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1400-3 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1400-4 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1400-5 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1401-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=711653 Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-0387.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0388.html rhn.redhat.com
- http://secunia.com/advisories/48359 secunia.com
- http://secunia.com/advisories/48402 secunia.com
- http://secunia.com/advisories/48414 secunia.com
- http://secunia.com/advisories/48495 Third Party Advisory
- http://secunia.com/advisories/48496 Third Party Advisory
- http://secunia.com/advisories/48513 Third Party Advisory
- http://secunia.com/advisories/48553 Third Party Advisory
- http://secunia.com/advisories/48561 Third Party Advisory
- http://secunia.com/advisories/48624 Third Party Advisory
- http://secunia.com/advisories/48629 Third Party Advisory
- http://secunia.com/advisories/48823 Third Party Advisory
- http://secunia.com/advisories/48920 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2433 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2458 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-14.html Third Party Advisory, Vendor Advisory
- http://www.securitytracker.com/id?1026801 www.securitytracker.com
- http://www.securitytracker.com/id?1026803 www.securitytracker.com
- http://www.securitytracker.com/id?1026804 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1400-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-2 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1400-3 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1400-4 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1400-5 Third Party Advisory
- http://www.ubuntu.com/usn/USN-1401-1 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=711653 Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007 Third Party Advisory