CVEvulnerability

CVE-2012-1938

9.3 HIGH Published 2012-06-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.

Affected configurations

• mozilla firefox (< 13.0) • mozilla seamonkey (< 2.10) • mozilla thunderbird (< 13.0) • opensuse opensuse 11.4 • opensuse opensuse 12.1 • suse linux enterprise desktop 10 • suse linux enterprise desktop 11 • suse linux enterprise server 10 • suse linux enterprise server 11 • suse linux enterprise software development kit 10 • suse linux enterprise software development kit 11 • redhat storage 2.0 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.2 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 6.2 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0

References