CVEvulnerability
CVE-2012-1953
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 11.0
• mozilla firefox 12.0
• mozilla firefox 13.0
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 10.0.3
• mozilla firefox 10.0.4
• mozilla firefox 10.0.5
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird 10.0
• mozilla thunderbird 10.0.1
• mozilla thunderbird 10.0.2
• mozilla thunderbird 10.0.3
• mozilla thunderbird 10.0.4
• mozilla thunderbird 11.0
• mozilla thunderbird 12.0
• mozilla thunderbird 13.0
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla thunderbird esr 10.0.3
• mozilla thunderbird esr 10.0.4
• mozilla thunderbird esr 10.0.5
• mozilla seamonkey (<= 2.10)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
… and 35 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html lists.opensuse.org
- http://osvdb.org/83998 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1088.html rhn.redhat.com
- http://secunia.com/advisories/49965 secunia.com
- http://secunia.com/advisories/49968 secunia.com
- http://secunia.com/advisories/49972 secunia.com
- http://secunia.com/advisories/49977 secunia.com
- http://secunia.com/advisories/49979 secunia.com
- http://secunia.com/advisories/49992 secunia.com
- http://secunia.com/advisories/49993 secunia.com
- http://secunia.com/advisories/49994 secunia.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-44.html Vendor Advisory
- http://www.securityfocus.com/bid/54578 www.securityfocus.com
- http://www.securitytracker.com/id?1027256 www.securitytracker.com
- http://www.securitytracker.com/id?1027257 www.securitytracker.com
- http://www.securitytracker.com/id?1027258 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1509-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1509-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1510-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=765218 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html lists.opensuse.org
- http://osvdb.org/83998 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1088.html rhn.redhat.com
- http://secunia.com/advisories/49965 secunia.com
- http://secunia.com/advisories/49968 secunia.com
- http://secunia.com/advisories/49972 secunia.com
- http://secunia.com/advisories/49977 secunia.com
- http://secunia.com/advisories/49979 secunia.com
- http://secunia.com/advisories/49992 secunia.com
- http://secunia.com/advisories/49993 secunia.com
- http://secunia.com/advisories/49994 secunia.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-44.html Vendor Advisory
- http://www.securityfocus.com/bid/54578 www.securityfocus.com
- http://www.securitytracker.com/id?1027256 www.securitytracker.com
- http://www.securitytracker.com/id?1027257 www.securitytracker.com
- http://www.securitytracker.com/id?1027258 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1509-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1509-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1510-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=765218 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894 oval.cisecurity.org