CVE-2012-0464

Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)

Published Mar 14, 2012 CVSS 2.0 · 7.5 High EPSS 4.0% KEV · Not listed
Description
Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-0496 Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.
Ubuntu USN Ubuntu USN USN-1400-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-1400-3 Thunderbird vulnerabilities
Ubuntu USN Ubuntu USN USN-1401-1 Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-1401-2 Thunderbird vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html cve-icon cve-icon
http://pwn2own.zerodayinitiative.com/status.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0387.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0388.html cve-icon cve-icon
http://secunia.com/advisories/48359 cve-icon cve-icon
http://secunia.com/advisories/48402 cve-icon cve-icon
http://secunia.com/advisories/48414 cve-icon cve-icon
http://secunia.com/advisories/48495 cve-icon cve-icon
http://secunia.com/advisories/48496 cve-icon cve-icon
http://secunia.com/advisories/48513 cve-icon cve-icon
http://secunia.com/advisories/48553 cve-icon cve-icon
http://secunia.com/advisories/48561 cve-icon cve-icon
http://secunia.com/advisories/48624 cve-icon cve-icon
http://secunia.com/advisories/48629 cve-icon cve-icon
http://secunia.com/advisories/48823 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 cve-icon cve-icon
http://www.mozilla.org/security/announce/2012/mfsa2012-19.html cve-icon cve-icon
http://www.securityfocus.com/bid/52465 cve-icon cve-icon
http://www.securitytracker.com/id?1026801 cve-icon cve-icon
http://www.securitytracker.com/id?1026803 cve-icon cve-icon
http://www.securitytracker.com/id?1026804 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-2 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-3 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-4 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1400-5 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1401-1 cve-icon cve-icon
http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757 cve-icon cve-icon
http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=720079 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=735104 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2012-0464 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2012-0464 cve-icon
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 6:23 PM
Reserved
Jan 9, 2012, 12:00 AM
Status
Modified
Published
Mar 14, 2012, 7:55 PM
Modified
Jun 16, 2026, 11:37 PM
Severity
Critical
Public date
Mar 13, 2012, 12:00 AM