Description
Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.
References (23)
Core 23
Core References
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1638-3
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51370
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1638-2
Exploit, Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=775228
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1636-1
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html
Third Party Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1483.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80183
Third Party Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1482.html
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51434
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51439
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51440
Third Party Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1638-1
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html
Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2012/mfsa2012-106.html
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51359
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51381
Broken Link vdb-entry
x_refsource_osvdb
http://osvdb.org/87598
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51369
Broken Link third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51360
Scores
CVSS v3
8.8
EPSS
0.0086
EPSS Percentile
75.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (24)
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
11.10
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
12.10
mozilla/firefox
< 17.0
mozilla/seamonkey
< 2.14
mozilla/thunderbird
< 17.0
mozilla/thunderbird_esr
10.0 - 10.0.11
opensuse/opensuse
11.4
opensuse/opensuse
12.1
... and 14 more
Published
Nov 21, 2012
Tracked Since
Feb 18, 2026