CVE-2012-0461

Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)

Published Mar 14, 2012 CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2433-1 iceweasel security update
Debian DSA Debian DSA DSA-2437-1 icedove security update
Debian DSA Debian DSA DSA-2548-1 iceape security update
EUVD EUVD EUVD-2012-0493 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Ubuntu USN Ubuntu USN USN-1400-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-1400-3 Thunderbird vulnerabilities
Ubuntu USN Ubuntu USN USN-1401-1 Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-1401-2 Thunderbird vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0387.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0388.html cve-icon cve-icon
http://secunia.com/advisories/48359 cve-icon cve-icon
http://secunia.com/advisories/48402 cve-icon cve-icon
http://secunia.com/advisories/48414 cve-icon cve-icon
http://secunia.com/advisories/48495 cve-icon cve-icon
http://secunia.com/advisories/48496 cve-icon cve-icon
http://secunia.com/advisories/48513 cve-icon cve-icon
http://secunia.com/advisories/48553 cve-icon cve-icon
http://secunia.com/advisories/48561 cve-icon cve-icon
http://secunia.com/advisories/48624 cve-icon cve-icon
http://secunia.com/advisories/48629 cve-icon cve-icon
http://secunia.com/advisories/48823 cve-icon cve-icon
http://secunia.com/advisories/48920 cve-icon cve-icon
http://www.debian.org/security/2012/dsa-2433 cve-icon cve-icon
http://www.debian.org/security/2012/dsa-2458 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 cve-icon cve-icon
http://www.mozilla.org/security/announce/2012/mfsa2012-19.html cve-icon cve-icon
http://www.securitytracker.com/id?1026801 cve-icon cve-icon
http://www.securitytracker.com/id?1026803 cve-icon cve-icon
http://www.securitytracker.com/id?1026804 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-2 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-3 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-4 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-5 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1401-1 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=657588 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=730425 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2012-0461 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15009 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2012-0461 cve-icon
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 6:23 PM
Reserved
Jan 9, 2012, 12:00 AM
Status
Modified
Published
Mar 14, 2012, 7:55 PM
Modified
Jun 16, 2026, 11:37 PM
Severity
Critical
Public date
Mar 13, 2012, 12:00 AM