Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2012-105
HistoryNov 20, 2012 - 12:00 a.m.

Use-after-free and buffer overflow issues found using Address Sanitizer — Mozilla

2012-11-2000:00:00
Mozilla Foundation
www.mozilla.org
24

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.9%

JSON

Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team discovered a series critically rated of use-after-free and buffer overflow issues using the Address Sanitizer tool in shipped software. These issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting five additional use-after-free, out of bounds read, and buffer overflow flaws introduced during Firefox development that were fixed before general release.

Affected configurations

Vulners
Node
mozillafirefoxRange<17
OR
mozillafirefox_esrRange<10.0.11
OR
mozillaseamonkeyRange<2.14
OR
mozillathunderbirdRange<17
OR
mozillathunderbird_esrRange<10.0.11

References

Related

openvas 68
nvd 9
ubuntucve 9
cvelist 9
cve 9
prion 9
nessus 41
ubuntu 4
centos 2
suse 3
freebsd 1
securityvulns 1
oraclelinux 2
veracode 12
redhat 2
fedora 3
debian 3
osv 3
ibm 2
gentoo 1
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-105) - Linux
2021-11-11 00:00:00
Mozilla SeaMonkey Multiple Vulnerabilities-02 (Nov 2012) - Mac OS X
2012-11-26 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities-02 (Nov 2012) - Mac OS X
2012-11-26 00:00:00
nvd
nvd
CVE-2012-5840
2012-11-21 12:55:03
CVE-2012-4214
2012-11-21 12:55:02
CVE-2012-4215
2012-11-21 12:55:02
ubuntucve
ubuntucve
CVE-2012-5840
2012-11-21 00:00:00
CVE-2012-4214
2012-11-21 00:00:00
CVE-2012-4213
2012-11-21 00:00:00
cvelist
cvelist
CVE-2012-4214
2012-11-21 11:00:00
CVE-2012-5840
2012-11-21 11:00:00
CVE-2012-4215
2012-11-21 11:00:00
cve
cve
CVE-2012-4214
2012-11-21 12:55:02
CVE-2012-5840
2012-11-21 12:55:03
CVE-2012-4213
2012-11-21 12:55:02
prion
prion
Design/Logic Flaw
2012-11-21 12:55:00
Design/Logic Flaw
2012-11-21 12:55:00
Design/Logic Flaw
2012-11-21 12:55:00
nessus
nessus
Mozilla Thunderbird < 17.0 Multiple Vulnerabilities
2012-11-21 00:00:00
Mozilla Thunderbird < 17.0 Multiple Vulnerabilities
2012-11-29 00:00:00
Mozilla Thunderbird 16.x <= 16 Multiple Vulnerabilities
2012-11-29 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-11-21 00:00:00
Firefox vulnerabilities
2012-11-21 00:00:00
ubufox update
2012-11-21 00:00:00
centos
centos
thunderbird security update
2012-11-22 02:10:10
firefox, xulrunner security update
2012-11-22 02:03:00
suse
suse
Security update for Mozilla Firefox (important)
2012-11-29 01:08:52
security update to Firefox 17.0 and other Mozilla based packages (important)
2013-01-23 14:07:31
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-11-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-12-03 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2012-11-20 00:00:00
firefox security update
2012-11-20 00:00:00
veracode
veracode
Arbitrary Code Execution Or Denial Of Service (DoS)
2019-05-02 04:41:14
Arbitrary Code Execution Or Denial Of Service (DoS)
2019-05-02 04:41:13
Cross Site Scripting (XSS)
2019-05-02 04:41:12
redhat
redhat
(RHSA-2012:1482) Critical: firefox security update
2012-11-20 00:00:00
(RHSA-2012:1483) Critical: thunderbird security update
2012-11-20 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: seamonkey-2.14-1.fc16
2012-12-04 04:52:29
[SECURITY] Fedora 17 Update: seamonkey-2.14-1.fc17
2012-12-04 04:58:59
[SECURITY] Fedora 18 Update: seamonkey-2.14-1.fc18
2012-12-04 05:23:29
debian
debian
[SECURITY] [DSA 2588-1] icedove security update
2012-12-16 13:09:41
[SECURITY] [DSA 2583-1] iceweasel security update
2012-12-08 12:05:22
[SECURITY] [DSA 2584-1] iceape security update
2012-12-08 14:05:02
osv
osv
iceape - several
2012-12-08 00:00:00
icedove - several
2012-12-16 00:00:00
iceweasel - several
2012-12-08 00:00:00
ibm
ibm
Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.9%

JSON
Related for MFSA2012-105
openvas68nvd9ubuntucve9cvelist9cve9prion9nessus41ubuntu4centos2suse3freebsd1securityvulns1oraclelinux2veracode12redhat2fedora3debian3osv3ibm2gentoo1