Ubuntu.comUB:CVE-2012-5829CVE-2012-5829
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.034 Low
EPSS
Percentile
91.5%
Heap-based buffer overflow in the nsWindow::OnExposeEvent function in
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird
before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14
allows remote attackers to execute arbitrary code via unspecified vectors.
Notes
| Author | Note |
|---|---|
| jdstrand | xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 17.0+build2-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | < 17.0+build2-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | firefox | < 17.0+build2-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | firefox | < 17.0+build2-0ubuntu0.12.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | thunderbird | < 17.0+build2-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | thunderbird | < 17.0+build2-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | thunderbird | < 17.0+build2-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | thunderbird | < 17.0+build2-0ubuntu0.12.10.1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2012-5829
nvd.nist.gov/vuln/detail/CVE-2012-5829
security-tracker.debian.org/tracker/CVE-2012-5829
ubuntu.com/security/notices/USN-1636-1
ubuntu.com/security/notices/USN-1638-1
ubuntu.com/security/notices/USN-1681-1
ubuntu.com/security/notices/USN-1681-2
www.cve.org/CVERecord?id=CVE-2012-5829
Related
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.034 Low
EPSS
Percentile
91.5%