CVEvulnerability
CVE-2012-0459
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 10.0
• mozilla firefox esr 10.1
• mozilla firefox esr 10.2
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla seamonkey (<= 2.7)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
… and 29 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2012-0387.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0388.html rhn.redhat.com
- http://secunia.com/advisories/48359 secunia.com
- http://secunia.com/advisories/48402 secunia.com
- http://secunia.com/advisories/48496 secunia.com
- http://secunia.com/advisories/48513 secunia.com
- http://secunia.com/advisories/48553 secunia.com
- http://secunia.com/advisories/48561 secunia.com
- http://secunia.com/advisories/48629 secunia.com
- http://secunia.com/advisories/49055 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-17.html Vendor Advisory
- http://www.securitytracker.com/id?1026801 www.securitytracker.com
- http://www.securitytracker.com/id?1026803 www.securitytracker.com
- http://www.securitytracker.com/id?1026804 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1400-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-3 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-4 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-5 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=723446 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2012-0387.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0388.html rhn.redhat.com
- http://secunia.com/advisories/48359 secunia.com
- http://secunia.com/advisories/48402 secunia.com
- http://secunia.com/advisories/48496 secunia.com
- http://secunia.com/advisories/48513 secunia.com
- http://secunia.com/advisories/48553 secunia.com
- http://secunia.com/advisories/48561 secunia.com
- http://secunia.com/advisories/48629 secunia.com
- http://secunia.com/advisories/49055 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-17.html Vendor Advisory
- http://www.securitytracker.com/id?1026801 www.securitytracker.com
- http://www.securitytracker.com/id?1026803 www.securitytracker.com
- http://www.securitytracker.com/id?1026804 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1400-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-3 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-4 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1400-5 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=723446 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066 oval.cisecurity.org