Lucene search
Mozilla FoundationMFSA2012-65HistoryAug 28, 2012 - 12:00 a.m.
Out-of-bounds read in format-number in XSLT — Mozilla
2012-08-2800:00:00
Mozilla Foundation
www.mozilla.org
31
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
64.8%
Security research Nicolas Grégoire used the Address Sanitizer tool to discover an out-of-bounds read in the format-number feature of XSLT, which can cause inaccurate formatting of numbers and information leakage. This is not directly exploitable.
Affected configurations
Node
mozillafirefoxRange<15
ORmozillafirefox_esrRange<10.0.7
ORmozillaseamonkeyRange<2.12
ORmozillathunderbirdRange<15
ORmozillathunderbird_esrRange<10.0.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 15 | |
| firefox esr | lt | 10.0.7 | |
| seamonkey | lt | 2.12 | |
| thunderbird | lt | 15 | |
| thunderbird esr | lt | 10.0.7 |
Related
cve
cve
CVE-2012-3972
2012-08-29 10:56:41
prion
prion
Heap overflow
2012-08-29 10:56:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-65) - Linux
2021-11-11 00:00:00
Debian: Security Advisory (DSA-2554-1)
2012-10-03 00:00:00
Debian: Security Advisory (DSA-2553-1)
2013-09-18 00:00:00
cvelist
cvelist
CVE-2012-3972
2012-08-29 10:00:00
ubuntucve
ubuntucve
CVE-2012-3972
2012-08-29 00:00:00
nvd
nvd
CVE-2012-3972
2012-08-29 10:56:41
debian
debian
[SECURITY] [DSA 2556-1] icedove security update
2012-10-07 13:13:58
[SECURITY] [DSA 2553-1] iceweasel security update
2012-09-24 17:18:25
[SECURITY] [DSA 2554-1] iceape security update
2012-09-26 19:00:31
osv
osv
iceweasel - several
2012-09-24 00:00:00
icedove - several
2012-10-07 00:00:00
iceape - several
2012-09-26 00:00:00
nessus
nessus
Debian DSA-2556-1 : icedove - several vulnerabilities
2012-10-08 00:00:00
Debian DSA-2554-1 : iceape - several vulnerabilities
2012-09-27 00:00:00
Debian DSA-2553-1 : iceweasel - several vulnerabilities
2012-09-25 00:00:00
centos
centos
thunderbird security update
2012-08-29 12:53:01
firefox, xulrunner security update
2012-08-29 12:43:30
veracode
veracode
Memory Corruption
2019-05-02 04:42:51
Memory Corruption
2019-05-02 04:42:52
Arbitrary Code Execution
2019-05-02 04:42:54
oraclelinux
oraclelinux
thunderbird security update
2012-08-29 00:00:00
firefox security update
2012-08-29 00:00:00
redhat
redhat
(RHSA-2012:1210) Critical: firefox security update
2012-08-29 00:00:00
(RHSA-2012:1211) Critical: thunderbird security update
2012-08-29 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-08-30 00:00:00
Firefox regression
2012-09-11 00:00:00
Thunderbird regressions
2012-09-28 00:00:00
suse
suse
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:32
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:15
Security update for Mozilla Firefox (important)
2012-09-13 01:08:39
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-09-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-08-28 00:00:00
ibm
ibm
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
64.8%
Related for MFSA2012-65