CVE-2012-0464

2012-03-1400:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.084 Low

EPSS

Percentile

94.4%

JSON

Use-after-free vulnerability in the browser engine in Mozilla Firefox
before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3,
Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before
10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute
arbitrary code via vectors involving an empty argument to the array.join
function in conjunction with the triggering of garbage collection.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 11.0+build1-0ubuntu0.10.04.2UNKNOWN
ubuntu10.10noarchfirefox< 11.0+build1-0ubuntu0.10.10.2UNKNOWN
ubuntu11.04noarchfirefox< 11.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 11.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 11.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2< 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2< 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	firefox	< 11.0+build1-0ubuntu0.10.04.2	UNKNOWN
ubuntu	10.10	noarch	firefox	< 11.0+build1-0ubuntu0.10.10.2	UNKNOWN
ubuntu	11.04	noarch	firefox	< 11.0+build1-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	firefox	< 11.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	10.04	noarch	thunderbird	< 3.1.20+build1+nobinonly-0ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	thunderbird	< 3.1.20+build1+nobinonly-0ubuntu0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	thunderbird	< 3.1.20+build1+nobinonly-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	thunderbird	< 11.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	10.04	noarch	xulrunner-1.9.2	< 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	xulrunner-1.9.2	< 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1	UNKNOWN