CVE-2012-0444

2012-02-0116:55:01

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.885

Percentile

98.7%

JSON

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

OSVersionArchitecturePackageVersionFilename
Debian12alllibvorbis< 1.3.2-1.2libvorbis_1.3.2-1.2_all.deb
Debian11alllibvorbis< 1.3.2-1.2libvorbis_1.3.2-1.2_all.deb
Debian999alllibvorbis< 1.3.2-1.2libvorbis_1.3.2-1.2_all.deb
Debian13alllibvorbis< 1.3.2-1.2libvorbis_1.3.2-1.2_all.deb
Debian12alllibvorbisidec< 1.0.2+svn18153-0.1libvorbisidec_1.0.2+svn18153-0.1_all.deb
Debian11alllibvorbisidec< 1.0.2+svn18153-0.1libvorbisidec_1.0.2+svn18153-0.1_all.deb
Debian999alllibvorbisidec< 1.0.2+svn18153-0.1libvorbisidec_1.0.2+svn18153-0.1_all.deb
Debian13alllibvorbisidec< 1.0.2+svn18153-0.1libvorbisidec_1.0.2+svn18153-0.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libvorbis	< 1.3.2-1.2	libvorbis_1.3.2-1.2_all.deb
Debian	11	all	libvorbis	< 1.3.2-1.2	libvorbis_1.3.2-1.2_all.deb
Debian	999	all	libvorbis	< 1.3.2-1.2	libvorbis_1.3.2-1.2_all.deb
Debian	13	all	libvorbis	< 1.3.2-1.2	libvorbis_1.3.2-1.2_all.deb
Debian	12	all	libvorbisidec	< 1.0.2+svn18153-0.1	libvorbisidec_1.0.2+svn18153-0.1_all.deb
Debian	11	all	libvorbisidec	< 1.0.2+svn18153-0.1	libvorbisidec_1.0.2+svn18153-0.1_all.deb
Debian	999	all	libvorbisidec	< 1.0.2+svn18153-0.1	libvorbisidec_1.0.2+svn18153-0.1_all.deb
Debian	13	all	libvorbisidec	< 1.0.2+svn18153-0.1	libvorbisidec_1.0.2+svn18153-0.1_all.deb