Lucene search

Mozilla FoundationMFSA2012-88

HistoryOct 11, 2012 - 12:00 a.m.

Miscellaneous memory safety hazards (rv:16.0.1) — Mozilla

2012-10-1100:00:00

Mozilla Foundation

www.mozilla.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.08 Low

EPSS

Percentile

94.3%

JSON

Mozilla developers identified and fixed two top crashing bugs in the browser engine used in Firefox and other Mozilla-based products. These bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Affected configurations

Vulners

Node

mozillafirefoxRange<16.0.1

mozillaseamonkeyRange<2.13.1

mozillathunderbirdRange<16.0.1

CPENameOperatorVersion
firefoxlt16.0.1
seamonkeylt2.13.1
thunderbirdlt16.0.1

Name	Operator	Version
firefox	lt	16.0.1
seamonkey	lt	2.13.1
thunderbird	lt	16.0.1

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4190

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4191

bugzilla.mozilla.org/show_bug.cgi?id=790139

bugzilla.mozilla.org/show_bug.cgi?id=798045

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.08 Low

EPSS

Percentile

94.3%

JSON

Related for MFSA2012-88