CVE-2012-4181

Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed

Vendors

Canonical Mozilla Redhat

Products

Ubuntu Linux Firefox Seamonkey and 7 more

CVE-2012-4180

Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 9.3% KEV · Not listed

Vendors

Canonical Debian Mozilla and 2 more

Products

Ubuntu Linux Debian Linux Firefox and 11 more

CVE-2010-0307

kernel: DoS on x86_64

The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 2 more

CVE-2010-0302

cups Incomplete fix for CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Apple Canonical Fedoraproject and 1 more

Products

Cups Mac Os X Mac Os X Server and 7 more

CVE-2012-4179

Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed

Vendors

Canonical Debian Mozilla and 2 more

Products

Ubuntu Linux Debian Linux Firefox and 11 more

CVE-2012-3995

Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 5.0% KEV · Not listed

Vendors

Canonical Mozilla Redhat and 1 more

Products

Ubuntu Linux Firefox Seamonkey and 10 more

CVE-2010-0159

Mozilla crashes with evidence of memory corruption (MFSA 2010-01)

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

CVSS 2.0 · 10.0 Critical EPSS 4.7% KEV · Not listed

Vendors

Canonical Debian Mozilla and 1 more

Products

Ubuntu Linux Debian Linux Firefox and 3 more

CVE-2012-3994

Mozilla: top object and location property accessible by plugins (MFSA 2012-82)

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed

Vendors

Canonical Mozilla Redhat and 1 more

Products

Ubuntu Linux Firefox Seamonkey and 10 more

CVE-2012-3992

Mozilla: Spoofing and script injection through location.hash (MFSA 2012-84)

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Canonical Mozilla Redhat and 1 more

Products

Ubuntu Linux Firefox Seamonkey and 10 more

CVE-2010-0136

openoffice.org: unenforced VBA macro security settings may lead to arbitrary macro execution

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

CVSS 2.0 · 9.3 Critical EPSS 8.1% KEV · Not listed

Vendors

Apache Canonical Debian

Products

Openoffice Ubuntu Linux Debian Linux

CVE-2012-3991

Mozilla: GetProperty function can bypass security checks (MFSA 2012-81)

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.

CVSS 2.0 · 9.3 Critical EPSS 3.1% KEV · Not listed

Vendors

Canonical Mozilla Redhat and 1 more

Products

Ubuntu Linux Firefox Seamonkey and 10 more

CVE-2012-3990

Mozilla: Use-after-free in the IME State Manager (MFSA 2012-87)

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Canonical Debian Mozilla and 2 more

Products

Ubuntu Linux Debian Linux Firefox and 11 more

CVE-2012-3989

Mozilla: Crash with invalid cast when using instanceof operator (MFSA 2012-80)

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service (assertion failure) via a crafted web site.

CVSS 2.0 · 9.3 Critical EPSS 3.5% KEV · Not listed

Vendors

Canonical Mozilla Suse

Products

Ubuntu Linux Firefox Seamonkey and 3 more

CVE-2012-3988

Mozilla: DOS and crash with full screen and history navigation (MFSA 2012-79)

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Canonical Mozilla Redhat and 1 more

Products

Ubuntu Linux Firefox Seamonkey and 10 more

CVE-2010-0050

webkitgtk: multiple security vulnerabilities in WebKit

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

CVSS 3.1 · 8.8 High EPSS 11.6% KEV · Not listed

Vendors

Apple Canonical Fedoraproject and 1 more

Products

Iphone Os Safari Ubuntu Linux and 2 more

CVE-2012-3986

Mozilla: Some DOMWindowUtils methods bypass security checks (MFSA 2012-77)

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Canonical Debian Mozilla and 2 more

Products

Ubuntu Linux Debian Linux Firefox and 11 more

CVE-2012-3985

Mozilla: Continued access to initial origin after setting document.domain can lead to XSS attacks (MFSA 2012-76)

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed

Vendors

Canonical Mozilla Suse

Products

Ubuntu Linux Firefox Seamonkey and 3 more

CVE-2012-3984

Mozilla: Select element persistance allows for attacks (MFSA 2012-75)

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.

CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed

Vendors

Canonical Mozilla Suse

Products

Ubuntu Linux Firefox Seamonkey and 3 more

CVE-2012-3983

Mozilla: Miscellaneous memory safety hazards (rv:16.0) (MFSA 2012-74)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.3% KEV · Not listed

Vendors

Canonical Mozilla Suse

Products

Ubuntu Linux Firefox Seamonkey and 3 more

CVE-2012-3982

Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed

Vendors

Canonical Debian Mozilla and 2 more

Products

Ubuntu Linux Debian Linux Firefox and 11 more