CVE-2012-5840

2012-11-2112:55:00

CWE-416

[email protected]

web.nvd.nist.gov

cve-2012-5840

use-after-free

mozilla firefox

remote code execution

heap memory corruption

nvd

security vulnerability

9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

88.2%

JSON

Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxlt17.0
mozilla:firefox_esrmozilla firefox esrlt10.0.11
mozilla:seamonkeymozilla seamonkeylt2.14
mozilla:thunderbirdmozilla thunderbirdlt17.0
mozilla:thunderbird_esrmozilla thunderbird esrlt10.0.11
suse:linux_enterprise_serversuse linux enterprise servereq10
suse:linux_enterprise_desktopsuse linux enterprise desktopeq11
opensuse:opensuseopensuseeq11.4
opensuse:opensuseopensuseeq12.2
suse:linux_enterprise_desktopsuse linux enterprise desktopeq10

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	lt	17.0
mozilla:firefox_esr	mozilla firefox esr	lt	10.0.11
mozilla:seamonkey	mozilla seamonkey	lt	2.14
mozilla:thunderbird	mozilla thunderbird	lt	17.0
mozilla:thunderbird_esr	mozilla thunderbird esr	lt	10.0.11
suse:linux_enterprise_server	suse linux enterprise server	eq	10
suse:linux_enterprise_desktop	suse linux enterprise desktop	eq	11
opensuse:opensuse	opensuse	eq	11.4
opensuse:opensuse	opensuse	eq	12.2
suse:linux_enterprise_desktop	suse linux enterprise desktop	eq	10