Lucene search
Mozilla FoundationMFSA2012-10HistoryFeb 10, 2012 - 12:00 a.m.
use after free in nsXBLDocumentInfo::ReadPrototypeBindings — Mozilla
2012-02-1000:00:00
Mozilla Foundation
www.mozilla.org
9
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.13 Low
EPSS
Percentile
95.5%
Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This crash may be potentially exploitable.
Affected configurations
Node
mozillafirefoxRange<10.0.1
ORmozillafirefox_esrRange<10.0.1
ORmozillaseamonkeyRange<2.7.1
ORmozillathunderbirdRange<10.0.1
ORmozillathunderbird_esrRange<10.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 10.0.1 | |
| firefox esr | lt | 10.0.1 | |
| seamonkey | lt | 2.7.1 | |
| thunderbird | lt | 10.0.1 | |
| thunderbird esr | lt | 10.0.1 |
Related
nessus
nessus
SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5807)
2012-02-16 00:00:00
Mozilla Thunderbird 10.x < 10.0.1 Memory Corruption
2012-02-13 00:00:00
SeaMonkey < 2.7.1 Memory Corruption
2012-02-13 00:00:00
openvas
openvas
Mandriva Update for mozilla-thunderbird MDVSA-2012:018 (mozilla-thunderbird)
2012-08-03 00:00:00
SuSE Update for MozillaFirefox openSUSE-SU-2012:0258-1 (MozillaFirefox)
2012-08-02 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:0258-1)
2012-08-02 00:00:00
prion
prion
Design/Logic Flaw
2012-02-11 02:55:00
freebsd
freebsd
mozilla -- use-after-free in nsXBLDocumentInfo::ReadPrototypeBindings
2012-02-10 00:00:00
cve
cve
CVE-2012-0452
2012-02-11 02:55:00
suse
suse
MozillaFirefox to 10.0.1 (critical)
2012-02-14 20:08:25
Security update for Mozilla Firefox (critical)
2012-02-16 04:08:25
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
seebug
seebug
ubuntucve
ubuntucve
CVE-2012-0452
2012-02-13 00:00:00
ubuntu
ubuntu
Firefox vulnerability
2012-02-13 00:00:00
Thunderbird vulnerabilities
2012-02-17 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey use-after-free
2012-02-14 00:00:00
cvelist
cvelist
CVE-2012-0452
2012-02-11 02:00:00
nvd
nvd
CVE-2012-0452
2012-02-11 02:55:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.13 Low
EPSS
Percentile
95.5%
Related for MFSA2012-10