CVEvulnerability
CVE-2012-3971
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.
Affected configurations
• mozilla firefox (<= 14.0)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.4.1
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 1.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 2.0.0.10
• mozilla firefox 2.0.0.11
• mozilla firefox 2.0.0.12
• mozilla firefox 2.0.0.13
• mozilla firefox 2.0.0.14
• mozilla firefox 2.0.0.15
• mozilla firefox 2.0.0.16
• mozilla firefox 2.0.0.17
• mozilla firefox 2.0.0.18
• mozilla firefox 2.0.0.19
• mozilla firefox 2.0.0.20
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
… and 204 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2012/mfsa2012-64.html Vendor Advisory
- http://www.securityfocus.com/bid/55304 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1548-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1548-2 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=753230 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=753623 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2012/mfsa2012-64.html Vendor Advisory
- http://www.securityfocus.com/bid/55304 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1548-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-1548-2 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=753230 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=753623 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062 oval.cisecurity.org