CVEvulnerability
CVE-2012-1958
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 11.0
• mozilla firefox 12.0
• mozilla firefox 13.0
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 10.0.3
• mozilla firefox 10.0.4
• mozilla firefox 10.0.5
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird 10.0
• mozilla thunderbird 10.0.1
• mozilla thunderbird 10.0.2
• mozilla thunderbird 10.0.3
• mozilla thunderbird 10.0.4
• mozilla thunderbird 11.0
• mozilla thunderbird 12.0
• mozilla thunderbird 13.0
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla thunderbird esr 10.0.3
• mozilla thunderbird esr 10.0.4
• mozilla thunderbird esr 10.0.5
• mozilla seamonkey (<= 2.10)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
… and 35 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html lists.opensuse.org
- http://osvdb.org/84001 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1088.html rhn.redhat.com
- http://secunia.com/advisories/49965 secunia.com
- http://secunia.com/advisories/49968 secunia.com
- http://secunia.com/advisories/49972 secunia.com
- http://secunia.com/advisories/49977 secunia.com
- http://secunia.com/advisories/49979 secunia.com
- http://secunia.com/advisories/49992 secunia.com
- http://secunia.com/advisories/49993 secunia.com
- http://secunia.com/advisories/49994 secunia.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-48.html Vendor Advisory
- http://www.securityfocus.com/bid/54574 www.securityfocus.com
- http://www.securitytracker.com/id?1027256 www.securitytracker.com
- http://www.securitytracker.com/id?1027257 www.securitytracker.com
- http://www.securitytracker.com/id?1027258 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1509-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1509-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1510-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=750820 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html lists.opensuse.org
- http://osvdb.org/84001 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1088.html rhn.redhat.com
- http://secunia.com/advisories/49965 secunia.com
- http://secunia.com/advisories/49968 secunia.com
- http://secunia.com/advisories/49972 secunia.com
- http://secunia.com/advisories/49977 secunia.com
- http://secunia.com/advisories/49979 secunia.com
- http://secunia.com/advisories/49992 secunia.com
- http://secunia.com/advisories/49993 secunia.com
- http://secunia.com/advisories/49994 secunia.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-48.html Vendor Advisory
- http://www.securityfocus.com/bid/54574 www.securityfocus.com
- http://www.securitytracker.com/id?1027256 www.securitytracker.com
- http://www.securitytracker.com/id?1027257 www.securitytracker.com
- http://www.securitytracker.com/id?1027258 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1509-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1509-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1510-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=750820 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434 oval.cisecurity.org