CVE-2012-4181

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html Mailing List Third Party Advisory
http://osvdb.org/86100 Broken Link
http://rhn.redhat.com/errata/RHSA-2012-1351.html Third Party Advisory
http://secunia.com/advisories/50856 Third Party Advisory
http://secunia.com/advisories/50892 Third Party Advisory
http://secunia.com/advisories/50904 Third Party Advisory
http://secunia.com/advisories/50935 Third Party Advisory
http://secunia.com/advisories/50936 Third Party Advisory
http://secunia.com/advisories/55318 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-85.html Vendor Advisory
http://www.securityfocus.com/bid/56130 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1611-1 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=786111 Issue Tracking Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79159 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html Mailing List Third Party Advisory
http://osvdb.org/86100 Broken Link
http://rhn.redhat.com/errata/RHSA-2012-1351.html Third Party Advisory
http://secunia.com/advisories/50856 Third Party Advisory
http://secunia.com/advisories/50892 Third Party Advisory
http://secunia.com/advisories/50904 Third Party Advisory
http://secunia.com/advisories/50935 Third Party Advisory
http://secunia.com/advisories/50936 Third Party Advisory
http://secunia.com/advisories/55318 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-85.html Vendor Advisory
http://www.securityfocus.com/bid/56130 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1611-1 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=786111 Issue Tracking Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79159 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:42

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - Mailing List, Third Party Advisory
References () http://osvdb.org/86100 - Broken Link () http://osvdb.org/86100 - Broken Link
References () http://rhn.redhat.com/errata/RHSA-2012-1351.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2012-1351.html - Third Party Advisory
References () http://secunia.com/advisories/50856 - Third Party Advisory () http://secunia.com/advisories/50856 - Third Party Advisory
References () http://secunia.com/advisories/50892 - Third Party Advisory () http://secunia.com/advisories/50892 - Third Party Advisory
References () http://secunia.com/advisories/50904 - Third Party Advisory () http://secunia.com/advisories/50904 - Third Party Advisory
References () http://secunia.com/advisories/50935 - Third Party Advisory () http://secunia.com/advisories/50935 - Third Party Advisory
References () http://secunia.com/advisories/50936 - Third Party Advisory () http://secunia.com/advisories/50936 - Third Party Advisory
References () http://secunia.com/advisories/55318 - Third Party Advisory () http://secunia.com/advisories/55318 - Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - Third Party Advisory () http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - Third Party Advisory
References () http://www.mozilla.org/security/announce/2012/mfsa2012-85.html - Vendor Advisory () http://www.mozilla.org/security/announce/2012/mfsa2012-85.html - Vendor Advisory
References () http://www.securityfocus.com/bid/56130 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/56130 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-1611-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-1611-1 - Third Party Advisory
References () https://bugzilla.mozilla.org/show_bug.cgi?id=786111 - Issue Tracking, Vendor Advisory () https://bugzilla.mozilla.org/show_bug.cgi?id=786111 - Issue Tracking, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/79159 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/79159 - Third Party Advisory, VDB Entry
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523 - Third Party Advisory () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523 - Third Party Advisory

21 Oct 2024, 13:55

Type Values Removed Values Added
CPE cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*

Information

Published : 2012-10-10 17:55

Updated : 2024-11-21 01:42


NVD link : CVE-2012-4181

Mitre link : CVE-2012-4181

CVE.ORG link : CVE-2012-4181


JSON object : View

Products Affected

mozilla

  • firefox
  • thunderbird
  • seamonkey
  • thunderbird_esr

redhat

  • enterprise_linux_server
  • enterprise_linux_desktop
  • enterprise_linux_eus
  • enterprise_linux_workstation

canonical

  • ubuntu_linux
CWE
CWE-416

Use After Free