CVEvulnerability
CVE-2012-1962
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 11.0
• mozilla firefox 12.0
• mozilla firefox 13.0
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 10.0.3
• mozilla firefox 10.0.4
• mozilla firefox 10.0.5
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird 10.0
• mozilla thunderbird 10.0.1
• mozilla thunderbird 10.0.2
• mozilla thunderbird 10.0.3
• mozilla thunderbird 10.0.4
• mozilla thunderbird 11.0
• mozilla thunderbird 12.0
• mozilla thunderbird 13.0
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla thunderbird esr 10.0.3
• mozilla thunderbird esr 10.0.4
• mozilla thunderbird esr 10.0.5
• mozilla seamonkey (<= 2.10)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
… and 35 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html lists.opensuse.org
- http://osvdb.org/84004 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1088.html rhn.redhat.com
- http://secunia.com/advisories/49965 secunia.com
- http://secunia.com/advisories/49968 secunia.com
- http://secunia.com/advisories/49972 secunia.com
- http://secunia.com/advisories/49977 secunia.com
- http://secunia.com/advisories/49979 secunia.com
- http://secunia.com/advisories/49992 secunia.com
- http://secunia.com/advisories/49993 secunia.com
- http://secunia.com/advisories/49994 secunia.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-52.html Vendor Advisory
- http://www.securityfocus.com/bid/54575 www.securityfocus.com
- http://www.securitytracker.com/id?1027256 www.securitytracker.com
- http://www.securitytracker.com/id?1027257 www.securitytracker.com
- http://www.securitytracker.com/id?1027258 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1509-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1509-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1510-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=764296 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html lists.opensuse.org
- http://osvdb.org/84004 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1088.html rhn.redhat.com
- http://secunia.com/advisories/49965 secunia.com
- http://secunia.com/advisories/49968 secunia.com
- http://secunia.com/advisories/49972 secunia.com
- http://secunia.com/advisories/49977 secunia.com
- http://secunia.com/advisories/49979 secunia.com
- http://secunia.com/advisories/49992 secunia.com
- http://secunia.com/advisories/49993 secunia.com
- http://secunia.com/advisories/49994 secunia.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-52.html Vendor Advisory
- http://www.securityfocus.com/bid/54575 www.securityfocus.com
- http://www.securitytracker.com/id?1027256 www.securitytracker.com
- http://www.securitytracker.com/id?1027257 www.securitytracker.com
- http://www.securitytracker.com/id?1027258 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1509-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1509-2 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1510-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=764296 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729 oval.cisecurity.org