CVE-2012-0447

Published Feb 1, 2012 CVSS 2.0 · 5.0 Medium EPSS 1.8% KEV · Not listed
Description
Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-0479 Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
Ubuntu USN Ubuntu USN USN-1355-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-1369-1 Thunderbird vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 6:23 PM
Reserved
Jan 9, 2012, 12:00 AM
Status
Modified
Published
Feb 1, 2012, 4:55 PM
Modified
Jun 16, 2026, 11:37 PM