Ubuntu.comUB:CVE-2012-3970CVE-2012-3970
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.126 Low
EPSS
Percentile
95.4%
Use-after-free vulnerability in the nsTArray_base::Length function in
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird
before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12
allows remote attackers to execute arbitrary code or cause a denial of
service (heap memory corruption) via vectors involving movement of a
requiredFeatures attribute from one SVG document to another.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 15.0+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | firefox | < 15.0+build1-0ubuntu0.11.04.2 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | < 15.0+build1-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | firefox | < 15.0+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | firefox | < 15.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 13.04 | noarch | firefox | < 15.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 13.10 | noarch | firefox | < 15.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | < 15.0+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | thunderbird | < 15.0+build1-0ubuntu0.11.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | thunderbird | < 15.0+build1-0ubuntu0.11.10.1 | UNKNOWN |
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.126 Low
EPSS
Percentile
95.4%