CVE-2012-0473

2012-04-2500:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.5%

JSON

The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x
through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0,
Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the
FindMaxElementInSubArray function with incorrect template arguments, which
allows remote attackers to obtain sensitive information from video memory
via a crafted WebGL.drawElements call.

Bugs

<https://bugzilla.mozilla.org/show_bug.cgi?id=743475>

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 12.0+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.04noarchfirefox< 12.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 12.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 12.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu10.04noarchthunderbird< 12.0.1+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.04noarchthunderbird< 12.0.1+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 12.0.1+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 12.0.1+build1-0ubuntu0.12.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	firefox	< 12.0+build1-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.04	noarch	firefox	< 12.0+build1-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	firefox	< 12.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	firefox	< 12.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	10.04	noarch	thunderbird	< 12.0.1+build1-0ubuntu0.10.04.1	UNKNOWN
ubuntu	11.04	noarch	thunderbird	< 12.0.1+build1-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	thunderbird	< 12.0.1+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	12.04	noarch	thunderbird	< 12.0.1+build1-0ubuntu0.12.04.1	UNKNOWN