CVEvulnerability
CVE-2012-0469
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-04-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 11.0
• mozilla firefox 10.0.3
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird 10.0
• mozilla thunderbird 10.0.1
• mozilla thunderbird 10.0.2
• mozilla thunderbird 10.0.3
• mozilla thunderbird 10.0.4
• mozilla thunderbird 11.0
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla thunderbird esr 10.0.3
• mozilla thunderbird esr 10.0.4
• mozilla seamonkey (<= 2.9)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
… and 43 more
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/48972 secunia.com
- http://secunia.com/advisories/49047 secunia.com
- http://secunia.com/advisories/49055 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-22.html Vendor Advisory
- http://www.securityfocus.com/bid/53220 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=738985 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16734 oval.cisecurity.org
- http://secunia.com/advisories/48972 secunia.com
- http://secunia.com/advisories/49047 secunia.com
- http://secunia.com/advisories/49055 secunia.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-22.html Vendor Advisory
- http://www.securityfocus.com/bid/53220 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=738985 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16734 oval.cisecurity.org