CVE-2012-1971

Firefox < 15.0 - Remote Code Execution or Denial of Service via Browser Engine

Title source: llm

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to garbage collection after certain MethodJIT execution, and unknown other vectors.

References (22)

Core 22

Core References

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=730208

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2012/mfsa2012-57.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=754150

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=780712

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16841

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=749039

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=754242

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=755916

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=765936

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=719750

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=779849

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1548-1

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=773097

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=732870

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=752087

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1548-2

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=753162

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=748119

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=752038

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html

Various Sources x_refsource_confirm

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Scores

EPSS 0.0381

EPSS Percentile 88.9%

Details

Status published

Products (47)

mozilla/firefox 1.0 (2 CPE variants)

mozilla/firefox 1.0.1

mozilla/firefox 1.0.2

mozilla/firefox 1.0.3

mozilla/firefox 1.0.4

mozilla/firefox 1.0.5

mozilla/firefox 1.0.6

mozilla/firefox 1.0.7

mozilla/firefox 1.0.8

mozilla/firefox 1.4.1

... and 37 more

Published Aug 29, 2012

Tracked Since Feb 18, 2026