CVE-2012-1938

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-1938
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0710.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0715.html Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-34.html Vendor Advisory
http://www.securityfocus.com/bid/53796 Third Party Advisory VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=670317 Exploit Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=699594 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=708688 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=716067 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=718852 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=723773 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=723971 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=730415 Exploit Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=736012 Exploit Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=748948 Issue Tracking Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17058 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0710.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0715.html Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-34.html Vendor Advisory
http://www.securityfocus.com/bid/53796 Third Party Advisory VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=670317 Exploit Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=699594 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=708688 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=716067 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=718852 Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=723773 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=723971 Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=730415 Exploit Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=736012 Exploit Issue Tracking Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=748948 Issue Tracking Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17058 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*
cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:redhat:storage:2.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
History

21 Nov 2024, 01:38

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html - Mailing List, Third Party Advisory
References () http://rhn.redhat.com/errata/RHSA-2012-0710.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2012-0710.html - Third Party Advisory
References () http://rhn.redhat.com/errata/RHSA-2012-0715.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2012-0715.html - Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 - Third Party Advisory () http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 - Third Party Advisory
References () http://www.mozilla.org/security/announce/2012/mfsa2012-34.html - Vendor Advisory () http://www.mozilla.org/security/announce/2012/mfsa2012-34.html - Vendor Advisory
References () http://www.securityfocus.com/bid/53796 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/53796 - Third Party Advisory, VDB Entry
References () https://bugzilla.mozilla.org/show_bug.cgi?id=670317 - Exploit, Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=670317 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=699594 - Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=699594 - Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=708688 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=708688 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=716067 - Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=716067 - Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=718852 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=718852 - Issue Tracking, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=723773 - Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=723773 - Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=723971 - Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=723971 - Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=730415 - Exploit, Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=730415 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=736012 - Exploit, Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=736012 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=748948 - Issue Tracking, Patch, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=748948 - Issue Tracking, Patch, Vendor Advisory
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17058 - Third Party Advisory () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17058 - Third Party Advisory
Information

Published : 2012-06-05 23:55

Updated : 2024-11-21 01:38

NVD link : CVE-2012-1938

Mitre link : CVE-2012-1938

CVE.ORG link : CVE-2012-1938

JSON object : View

Products Affected

mozilla

  • firefox
  • thunderbird
  • seamonkey

opensuse

  • opensuse

redhat

  • enterprise_linux_server
  • enterprise_linux_desktop
  • enterprise_linux_server_aus
  • storage
  • enterprise_linux_eus
  • enterprise_linux_workstation

suse

  • linux_enterprise_software_development_kit
  • linux_enterprise_server
  • linux_enterprise_desktop
CWE
NVD-CWE-noinfo

NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024