CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
98.7%
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
Vendor | Product | Version | CPE |
---|---|---|---|
mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
debian | debian_linux | 5.0 | cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* |
debian | debian_linux | 6.0 | cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* |
opensuse | opensuse | 11.4 | cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* |
suse | linux_enterprise_desktop | 10 | cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:* |
suse | linux_enterprise_desktop | 11 | cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:* |
suse | linux_enterprise_server | 10 | cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:* |
suse | linux_enterprise_server | 11 | cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:* |
lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html
lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html
lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
secunia.com/advisories/48043
secunia.com/advisories/48095
www.debian.org/security/2012/dsa-2400
www.debian.org/security/2012/dsa-2402
www.debian.org/security/2012/dsa-2406
www.mandriva.com/security/advisories?name=MDVSA-2012:013
www.mozilla.org/security/announce/2012/mfsa2012-07.html
www.securityfocus.com/bid/51753
www.ubuntu.com/usn/USN-1370-1
bugzilla.mozilla.org/show_bug.cgi?id=719612
exchange.xforce.ibmcloud.com/vulnerabilities/72858
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14464