CVEvulnerability

CVE-2012-0472

9.3 HIGH Published 2012-04-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-04-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

Affected configurations

• mozilla firefox 4.0 • mozilla firefox 4.0.1 • mozilla firefox 5.0 • mozilla firefox 6.0 • mozilla firefox 6.0.1 • mozilla firefox 6.0.2 • mozilla firefox 7.0 • mozilla firefox 7.0.1 • mozilla firefox 8.0 • mozilla firefox 8.0.1 • mozilla firefox 9.0 • mozilla firefox 9.0.1 • mozilla firefox 10.0 • mozilla firefox 10.0.1 • mozilla firefox 10.0.2 • mozilla firefox 11.0 • mozilla firefox 10.0.3 • mozilla thunderbird 5.0 • mozilla thunderbird 6.0 • mozilla thunderbird 6.0.1 • mozilla thunderbird 6.0.2 • mozilla thunderbird 7.0 • mozilla thunderbird 7.0.1 • mozilla thunderbird 8.0 • mozilla thunderbird 9.0 • mozilla thunderbird 10.0 • mozilla thunderbird 10.0.1 • mozilla thunderbird 10.0.2 • mozilla thunderbird 10.0.3 • mozilla thunderbird 10.0.4 • mozilla thunderbird 11.0 • mozilla thunderbird esr 10.0 • mozilla thunderbird esr 10.0.1 • mozilla thunderbird esr 10.0.2 • mozilla thunderbird esr 10.0.3 • mozilla thunderbird esr 10.0.4 • mozilla seamonkey (<= 2.9) • mozilla seamonkey 1.0 • mozilla seamonkey 1.0.1 • mozilla seamonkey 1.0.2 • mozilla seamonkey 1.0.3 • mozilla seamonkey 1.0.4 • mozilla seamonkey 1.0.5 • mozilla seamonkey 1.0.6 • mozilla seamonkey 1.0.7 • mozilla seamonkey 1.0.8 • mozilla seamonkey 1.0.9 • mozilla seamonkey 1.1 • mozilla seamonkey 1.1.1 • mozilla seamonkey 1.1.2 • mozilla seamonkey 1.1.3 • mozilla seamonkey 1.1.4 • mozilla seamonkey 1.1.5 • mozilla seamonkey 1.1.6 • mozilla seamonkey 1.1.7 • mozilla seamonkey 1.1.8 • mozilla seamonkey 1.1.9 • mozilla seamonkey 1.1.10 • mozilla seamonkey 1.1.11 • mozilla seamonkey 1.1.12 … and 41 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References