Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
History
21 Nov 2024, 01:35
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - | |
References | () http://secunia.com/advisories/48402 - | |
References | () http://secunia.com/advisories/48561 - | |
References | () http://secunia.com/advisories/48629 - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - | |
References | () http://www.mozilla.org/security/announce/2012/mfsa2012-12.html - | |
References | () http://www.securitytracker.com/id?1026801 - | |
References | () http://www.securitytracker.com/id?1026803 - | |
References | () http://www.securitytracker.com/id?1026804 - | |
References | () https://bugzilla.mozilla.org/show_bug.cgi?id=684555 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14258 - |
21 Oct 2024, 13:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:* |
Information
Published : 2012-03-14 19:55
Updated : 2024-11-21 01:35
NVD link : CVE-2012-0454
Mitre link : CVE-2012-0454
CVE.ORG link : CVE-2012-0454
JSON object : View
Products Affected
mozilla
- firefox
- thunderbird
- seamonkey
- thunderbird_esr
- firefox_esr
microsoft
- windows_7
CWE
CWE-399
Resource Management Errors