CVEvulnerability
CVE-2012-1946
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-06-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 10.0.3
• mozilla firefox 10.0.4
• mozilla firefox 11.0
• mozilla firefox 12.0
• mozilla seamonkey (<= 2.9)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
… and 46 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2012-0710.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0715.html rhn.redhat.com
- http://secunia.com/advisories/49981 Permissions Required
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-38.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=750109 Issue Tracking
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17010 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2012-0710.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0715.html rhn.redhat.com
- http://secunia.com/advisories/49981 Permissions Required
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-38.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=750109 Issue Tracking
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17010 oval.cisecurity.org