CVE-2012-0444

2012-02-0100:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.885 High

EPSS

Percentile

98.7%

JSON

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before
3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly
initialize nsChildView data structures, which allows remote attackers to
cause a denial of service (memory corruption and application crash) or
possibly execute arbitrary code via a crafted Ogg Vorbis file.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 10.0+build1-0ubuntu0.10.04.2UNKNOWN
ubuntu10.10noarchfirefox< 10.0+build1-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchfirefox< 10.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 10.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchlibvorbis< 1.2.3-3ubuntu1.1UNKNOWN
ubuntu10.10noarchlibvorbis< 1.3.1-1ubuntu0.1UNKNOWN
ubuntu11.04noarchlibvorbis< 1.3.2-1ubuntu1.1UNKNOWN
ubuntu11.10noarchlibvorbis< 1.3.2-1ubuntu2.1UNKNOWN
ubuntu12.04noarchlibvorbis< 1.3.2-1ubuntu3UNKNOWN
ubuntu12.10noarchlibvorbis< 1.3.2-1ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	firefox	< 10.0+build1-0ubuntu0.10.04.2	UNKNOWN
ubuntu	10.10	noarch	firefox	< 10.0+build1-0ubuntu0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	firefox	< 10.0+build1-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	firefox	< 10.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	10.04	noarch	libvorbis	< 1.2.3-3ubuntu1.1	UNKNOWN
ubuntu	10.10	noarch	libvorbis	< 1.3.1-1ubuntu0.1	UNKNOWN
ubuntu	11.04	noarch	libvorbis	< 1.3.2-1ubuntu1.1	UNKNOWN
ubuntu	11.10	noarch	libvorbis	< 1.3.2-1ubuntu2.1	UNKNOWN
ubuntu	12.04	noarch	libvorbis	< 1.3.2-1ubuntu3	UNKNOWN
ubuntu	12.10	noarch	libvorbis	< 1.3.2-1ubuntu3	UNKNOWN