Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2012-58
HistoryAug 28, 2012 - 12:00 a.m.

Use-after-free issues found using Address Sanitizer — Mozilla

2012-08-2800:00:00
Mozilla Foundation
www.mozilla.org
35

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.217

Percentile

96.5%

JSON

Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team discovered a series of use-after-free issues using the Address Sanitizer tool. Many of these issues are potentially exploitable, allowing for remote code execution.

Affected configurations

Vulners
Node
mozillafirefoxRange<15
OR
mozillafirefox_esrRange<10.0.7
OR
mozillaseamonkeyRange<2.12
OR
mozillathunderbirdRange<15
OR
mozillathunderbird_esrRange<10.0.7
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillafirefox_esr*cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
mozillathunderbird*cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
mozillathunderbird_esr*cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*

References

Related

openvas 45
nessus 38
oraclelinux 2
centos 2
redhat 2
veracode 22
debian 3
osv 3
ubuntu 4
suse 4
securityvulns 2
freebsd 1
cve 14
cvelist 14
prion 14
ubuntucve 14
nvd 14
ibm 1
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-58) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-1548-2)
2012-09-17 00:00:00
Ubuntu: Security Advisory (USN-1551-2)
2012-10-03 00:00:00
nessus
nessus
Thunderbird 10.0.x < 10.0.7 Multiple Vulnerabilities (Mac OS X)
2012-08-29 00:00:00
RHEL 5 / 6 : thunderbird (RHSA-2012:1211)
2012-08-29 00:00:00
CentOS 5 / 6 : thunderbird (CESA-2012:1211)
2012-08-30 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2012-08-29 00:00:00
firefox security update
2012-08-29 00:00:00
centos
centos
thunderbird security update
2012-08-29 12:53:01
firefox, xulrunner security update
2012-08-29 12:43:30
redhat
redhat
(RHSA-2012:1211) Critical: thunderbird security update
2012-08-29 00:00:00
(RHSA-2012:1210) Critical: firefox security update
2012-08-29 00:00:00
veracode
veracode
Memory Corruption
2019-05-02 04:42:51
Memory Corruption
2019-05-02 04:42:50
Memory Corruption
2019-05-02 04:42:50
debian
debian
[SECURITY] [DSA 2556-1] icedove security update
2012-10-07 13:13:58
[SECURITY] [DSA 2554-1] iceape security update
2012-09-26 19:00:31
[SECURITY] [DSA 2553-1] iceweasel security update
2012-09-24 17:18:25
osv
osv
iceweasel - several
2012-09-24 00:00:00
iceape - several
2012-09-26 00:00:00
icedove - several
2012-10-07 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-08-30 00:00:00
Thunderbird regressions
2012-09-28 00:00:00
Firefox regression
2012-09-11 00:00:00
suse
suse
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:32
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:15
Security update for Mozilla Firefox (important)
2012-09-13 01:08:39
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-09-18 00:00:00
VUPEN - Mozilla Firefox &quot;nsHTMLEditRules&quot; Remote Use-after-free &#40;CVE-2012-3958 / MFSA 2012-58&#41;
2012-09-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-08-28 00:00:00
cve
cve
CVE-2012-3958
2012-08-29 10:56:40
CVE-2012-3959
2012-08-29 10:56:40
CVE-2012-3960
2012-08-29 10:56:40
cvelist
cvelist
CVE-2012-3958
2012-08-29 10:00:00
CVE-2012-1976
2012-08-29 10:00:00
CVE-2012-3957
2012-08-29 10:00:00
prion
prion
Design/Logic Flaw
2012-08-29 10:56:00
Design/Logic Flaw
2012-08-29 10:56:00
Code injection
2012-08-29 10:56:00
ubuntucve
ubuntucve
CVE-2012-3957
2012-08-29 00:00:00
CVE-2012-3963
2012-08-29 00:00:00
CVE-2012-1976
2012-08-29 00:00:00
nvd
nvd
CVE-2012-3964
2012-08-29 10:56:40
CVE-2012-3959
2012-08-29 10:56:40
CVE-2012-3958
2012-08-29 10:56:40
ibm
ibm
Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.217

Percentile

96.5%

JSON
Related for MFSA2012-58
openvas45nessus38oraclelinux2centos2redhat2veracode22debian3osv3ubuntu4suse4securityvulns2freebsd1cve14cvelist14prion14ubuntucve14nvd14ibm1