Lucene search

Mozilla FoundationMFSA2012-86

HistoryOct 09, 2012 - 12:00 a.m.

Heap memory corruption issues found using Address Sanitizer — Mozilla

2012-10-0900:00:00

Mozilla Foundation

www.mozilla.org

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.713 High

EPSS

Percentile

98.0%

JSON

Security researcher Atte Kettunen from OUSPG reported several heap memory corruption issues found using the Address Sanitizer tool. These issues are potentially exploitable, allowing for remote code execution.

CPENameOperatorVersion
firefoxlt16
firefox esrlt10.0.8
seamonkeylt2.13
thunderbirdlt16
thunderbird esrlt10.0.8

Name	Operator	Version
firefox	lt	16
firefox esr	lt	10.0.8
seamonkey	lt	2.13
thunderbird	lt	16
thunderbird esr	lt	10.0.8

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4185

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4186

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4187

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4188

bugzilla.mozilla.org/show_bug.cgi?id=785753

bugzilla.mozilla.org/show_bug.cgi?id=785967

bugzilla.mozilla.org/show_bug.cgi?id=787493

bugzilla.mozilla.org/show_bug.cgi?id=787722

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.713 High

EPSS

Percentile

98.0%

JSON

Related for MFSA2012-86