CVE-2012-0459

Mozilla Firefox <11 - DoS/Arbitrary Code Execution

Title source: llm
STIX 2.1

Description

The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.

References (24)

Core 24
Core References
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48402
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1400-5
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48359
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1400-4
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48629
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=723446
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1400-3
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0387.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48496
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49055
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1400-2
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026803
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48553
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1400-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48561
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0388.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026801
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026804
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48513

Scores

EPSS 0.0381
EPSS Percentile 88.8%

Details

CWE
CWE-264
Status published
Products (34)
mozilla/firefox 4.0 (13 CPE variants)
mozilla/firefox 4.0.1
mozilla/firefox 5.0
mozilla/firefox 5.0.1
mozilla/firefox 6.0
mozilla/firefox 6.0.1
mozilla/firefox 6.0.2
mozilla/firefox 7.0
mozilla/firefox 7.0.1
mozilla/firefox 8.0
... and 24 more
Published Mar 14, 2012
Tracked Since Feb 18, 2026