CVEvulnerability

CVE-2012-1962

10.0 HIGH Published 2012-07-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399

Description

Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.

Affected configurations

• mozilla firefox 4.0 • mozilla firefox 4.0.1 • mozilla firefox 5.0 • mozilla firefox 5.0.1 • mozilla firefox 6.0 • mozilla firefox 6.0.1 • mozilla firefox 6.0.2 • mozilla firefox 7.0 • mozilla firefox 7.0.1 • mozilla firefox 8.0 • mozilla firefox 8.0.1 • mozilla firefox 9.0 • mozilla firefox 9.0.1 • mozilla firefox 11.0 • mozilla firefox 12.0 • mozilla firefox 13.0 • mozilla firefox 10.0 • mozilla firefox 10.0.1 • mozilla firefox 10.0.2 • mozilla firefox 10.0.3 • mozilla firefox 10.0.4 • mozilla firefox 10.0.5 • mozilla thunderbird 5.0 • mozilla thunderbird 6.0 • mozilla thunderbird 6.0.1 • mozilla thunderbird 6.0.2 • mozilla thunderbird 7.0 • mozilla thunderbird 7.0.1 • mozilla thunderbird 8.0 • mozilla thunderbird 9.0 • mozilla thunderbird 9.0.1 • mozilla thunderbird 10.0 • mozilla thunderbird 10.0.1 • mozilla thunderbird 10.0.2 • mozilla thunderbird 10.0.3 • mozilla thunderbird 10.0.4 • mozilla thunderbird 11.0 • mozilla thunderbird 12.0 • mozilla thunderbird 13.0 • mozilla thunderbird esr 10.0 • mozilla thunderbird esr 10.0.1 • mozilla thunderbird esr 10.0.2 • mozilla thunderbird esr 10.0.3 • mozilla thunderbird esr 10.0.4 • mozilla thunderbird esr 10.0.5 • mozilla seamonkey (<= 2.10) • mozilla seamonkey 1.0 • mozilla seamonkey 1.0.1 • mozilla seamonkey 1.0.2 • mozilla seamonkey 1.0.3 • mozilla seamonkey 1.0.4 • mozilla seamonkey 1.0.5 • mozilla seamonkey 1.0.6 • mozilla seamonkey 1.0.7 • mozilla seamonkey 1.0.8 • mozilla seamonkey 1.0.9 • mozilla seamonkey 1.1 • mozilla seamonkey 1.1.1 • mozilla seamonkey 1.1.2 • mozilla seamonkey 1.1.3 … and 35 more

Related

Weakness · not in database (1)

References