Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-0449
HistoryFeb 01, 2012 - 4:55 p.m.

CVE-2012-0449

2012-02-0116:55:01
CWE-119
[email protected]
web.nvd.nist.gov
49
mozilla
firefox
thunderbird
seamonkey
cve-2012-0449
memory corruption
denial of service
application crash
xslt stylesheet
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.9 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.0%

JSON

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.

Affected configurations

NVD
Node
mozillafirefoxRange<3.6.26
OR
mozillafirefoxRange4.0–10.0
OR
mozillaseamonkeyRange<2.7
OR
mozillathunderbirdRange<3.1.18
OR
mozillathunderbirdRange5.0–10.0
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
Node
opensuseopensuseMatch11.4
OR
suselinux_enterprise_desktopMatch10sp4
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_serverMatch10sp4
OR
suselinux_enterprise_serverMatch11sp1
OR
suselinux_enterprise_serverMatch11sp1vmware
OR
suselinux_enterprise_software_development_kitMatch10sp4
OR
suselinux_enterprise_software_development_kitMatch11sp1

Related

cvelist 1
prion 1
veracode 1
openvas 48
ubuntucve 1
securityvulns 2
nvd 1
mozilla 1
debian 3
nessus 48
osv 3
centos 2
oraclelinux 2
redhat 2
suse 4
ubuntu 6
freebsd 1
kitploit 1
gentoo 1
cvelist
cvelist
CVE-2012-0449
2012-02-01 16:00:00
prion
prion
Memory corruption
2012-02-01 16:55:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:07:21
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-08) - Linux
2021-11-16 00:00:00
Oracle: Security Advisory (ELSA-2012-0080)
2015-10-06 00:00:00
Debian Security Advisory DSA 2406-1 (icedove - several vulnerabilities)
2013-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2012-0449
2012-02-01 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2012-08
2012-02-03 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-02-03 00:00:00
nvd
nvd
CVE-2012-0449
2012-02-01 16:55:01
mozilla
mozilla
Crash with malformed embedded XSLT stylesheets — Mozilla
2012-01-31 00:00:00
debian
debian
[SECURITY] [DSA 2406-1] icedove security update
2012-02-09 12:07:23
[SECURITY] [DSA 2400-1] iceweasel security update
2012-02-02 19:52:15
[SECURITY] [DSA 2402-1] iceape security update
2012-02-02 19:53:30
nessus
nessus
Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20120131)
2012-08-01 00:00:00
Debian DSA-2406-1 : icedove - several vulnerabilities
2012-02-10 00:00:00
CentOS 6 : thunderbird (CESA-2012:0080)
2012-02-02 00:00:00
osv
osv
iceape - several
2012-02-02 00:00:00
iceweasel - several
2012-02-02 00:00:00
icedove - several
2012-02-09 00:00:00
centos
centos
thunderbird security update
2012-02-01 11:56:07
firefox, xulrunner security update
2012-02-01 03:34:27
oraclelinux
oraclelinux
thunderbird security update
2012-01-31 00:00:00
firefox security update
2012-01-31 00:00:00
redhat
redhat
(RHSA-2012:0080) Critical: thunderbird security update
2012-01-31 00:00:00
(RHSA-2012:0079) Critical: firefox security update
2012-01-31 00:00:00
suse
suse
Security update for Mozilla XULrunner (important)
2012-02-09 19:07:25
Security update for Mozilla Firefox (important)
2012-02-09 19:10:22
MozillaFirefox: Version 10 (important)
2012-02-09 19:10:49
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-02-08 00:00:00
Xulrunnner vulnerabilities
2012-02-08 00:00:00
Firefox vulnerabilities
2012-02-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-01-31 00:00:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.9 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.0%

JSON
Related for CVE-2012-0449
cvelist1prion1veracode1openvas48ubuntucve1securityvulns2nvd1mozilla1debian3nessus48osv3centos2oraclelinux2redhat2suse4ubuntu6freebsd1kitploit1gentoo1