PRIOn knowledge basePRION:CVE-2012-5833Memory corruption
8.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.018 Low
EPSS
Percentile
87.8%
The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via function calls involving certain values of the level parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 11.10 | |
| ubuntu_linux | eq | 12.10 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 10.04 | |
| firefox | lt | 17.0 | |
| firefox_esr | lt | 10.0.11 | |
| seamonkey | lt | 2.14 | |
| thunderbird | lt | 17.0 | |
| thunderbird_esr | lt | 10.0.11 | |
| opensuse | eq | 11.4 |
References
lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html
lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
lists.opensuse.org/opensuse-updates/2012-11/msg00092.html
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html
osvdb.org/87581
rhn.redhat.com/errata/RHSA-2012-1482.html
rhn.redhat.com/errata/RHSA-2012-1483.html
secunia.com/advisories/51359
secunia.com/advisories/51360
secunia.com/advisories/51369
secunia.com/advisories/51370
secunia.com/advisories/51381
secunia.com/advisories/51434
secunia.com/advisories/51439
secunia.com/advisories/51440
www.mandriva.com/security/advisories?name=MDVSA-2012:173
www.mozilla.org/security/announce/2012/mfsa2012-106.html
www.securityfocus.com/bid/56642
www.ubuntu.com/usn/USN-1636-1
www.ubuntu.com/usn/USN-1638-1
www.ubuntu.com/usn/USN-1638-2
www.ubuntu.com/usn/USN-1638-3
bugzilla.mozilla.org/show_bug.cgi?id=785734
exchange.xforce.ibmcloud.com/vulnerabilities/80184
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16748
Related
8.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.018 Low
EPSS
Percentile
87.8%