Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5839
HistoryNov 21, 2012 - 12:00 a.m.

CVE-2012-5839

2012-11-2100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.028

Percentile

90.7%

Heap-based buffer overflow in the
gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox
before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0,
Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows
remote attackers to execute arbitrary code via unspecified vectors.

Notes

Author Note
jdstrand xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details)
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 17.0+build2-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchfirefox< 17.0+build2-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 17.0+build2-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 17.0+build2-0ubuntu0.12.10.1UNKNOWN
ubuntu10.04noarchthunderbird< 17.0+build2-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 17.0+build2-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 17.0+build2-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchthunderbird< 17.0+build2-0ubuntu0.12.10.1UNKNOWN

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.028

Percentile

90.7%