CVE-2012-3959

2012-08-2910:56:00

CWE-416

[email protected]

web.nvd.nist.gov

cve-2012-3959

mozilla firefox

thunderbird

seamonkey

vulnerability

remote code execution

denial of service

heap memory corruption

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.042 Low

EPSS

Percentile

92.1%

JSON

Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxlt15.0
mozilla:seamonkeymozilla seamonkeylt2.12
mozilla:thunderbirdmozilla thunderbirdlt15.0
mozilla:firefox_esrmozilla firefox esrlt10.0.7
mozilla:thunderbird_esrmozilla thunderbird esrlt10.0.7
suse:linux_enterprise_desktopsuse linux enterprise desktopeq11
opensuse:opensuseopensuseeq12.2
suse:linux_enterprise_serversuse linux enterprise servereq11
suse:linux_enterprise_software_development_kitsuse linux enterprise software development kiteq11
suse:linux_enterprise_desktopsuse linux enterprise desktopeq10

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	lt	15.0
mozilla:seamonkey	mozilla seamonkey	lt	2.12
mozilla:thunderbird	mozilla thunderbird	lt	15.0
mozilla:firefox_esr	mozilla firefox esr	lt	10.0.7
mozilla:thunderbird_esr	mozilla thunderbird esr	lt	10.0.7
suse:linux_enterprise_desktop	suse linux enterprise desktop	eq	11
opensuse:opensuse	opensuse	eq	12.2
suse:linux_enterprise_server	suse linux enterprise server	eq	11
suse:linux_enterprise_software_development_kit	suse linux enterprise software development kit	eq	11
suse:linux_enterprise_desktop	suse linux enterprise desktop	eq	10