CVE-2012-0467

HIGH

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

http://secunia.com/advisories/48920

http://secunia.com/advisories/48922

http://secunia.com/advisories/48972

http://secunia.com/advisories/49047

http://secunia.com/advisories/49055

http://www.debian.org/security/2012/dsa-2457

http://www.debian.org/security/2012/dsa-2458

http://www.debian.org/security/2012/dsa-2464

http://www.mandriva.com/security/advisories?name=MDVSA-2012:066

http://www.mandriva.com/security/advisories?name=MDVSA-2012:081

http://www.mozilla.org/security/announce/2012/mfsa2012-20.html

http://www.securityfocus.com/bid/53223

https://bugzilla.mozilla.org/show_bug.cgi?id=680456

https://bugzilla.mozilla.org/show_bug.cgi?id=706381

https://bugzilla.mozilla.org/show_bug.cgi?id=708825

https://bugzilla.mozilla.org/show_bug.cgi?id=714614

https://bugzilla.mozilla.org/show_bug.cgi?id=716556

https://bugzilla.mozilla.org/show_bug.cgi?id=720305

https://bugzilla.mozilla.org/show_bug.cgi?id=723453

https://bugzilla.mozilla.org/show_bug.cgi?id=726332

https://bugzilla.mozilla.org/show_bug.cgi?id=726502

https://bugzilla.mozilla.org/show_bug.cgi?id=732941

https://bugzilla.mozilla.org/show_bug.cgi?id=732951

https://bugzilla.mozilla.org/show_bug.cgi?id=733282

https://bugzilla.mozilla.org/show_bug.cgi?id=733979

https://bugzilla.mozilla.org/show_bug.cgi?id=735073

https://bugzilla.mozilla.org/show_bug.cgi?id=735943

https://bugzilla.mozilla.org/show_bug.cgi?id=736589

https://bugzilla.mozilla.org/show_bug.cgi?id=736609

https://bugzilla.mozilla.org/show_bug.cgi?id=737129

https://bugzilla.mozilla.org/show_bug.cgi?id=737182

https://bugzilla.mozilla.org/show_bug.cgi?id=737384

https://bugzilla.mozilla.org/show_bug.cgi?id=737875

https://bugzilla.mozilla.org/show_bug.cgi?id=740595

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17074

Details

Source: MITRE

Published: 2012-04-25

Updated: 2018-01-18

Risk Information

CVSS v2.0

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:*

Configuration 2

OR

cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox_esr:10.0.3:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:6.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:7.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:8.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:9.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:11.0:*:*:*:*:*:*:*

Configuration 4

OR

cpe:2.3:a:mozilla:thunderbird_esr:10.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird_esr:10.0.3:*:*:*:*:*:*:*

Configuration 5

OR

cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta6:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.9:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.9:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:*:beta3:*:*:*:*:*:* versions up to 2.9 (inclusive)

Tenable Plugins

View all (37 total)

IDNameProductFamilySeverity
80786Oracle Solaris Third-Party Patch Update : thunderbird (multiple_vulnerabilities_in_thunderbird5)NessusSolaris Local Security Checks
critical
80607Oracle Solaris Third-Party Patch Update : firefox (multiple_vulnerabilities_in_firefox_web1)NessusSolaris Local Security Checks
critical
74612openSUSE Security Update : MozillaFirefox / MozillaThunderbird / seamonkey / etc (openSUSE-SU-2012:0567-1)NessusSuSE Local Security Checks
critical
68518Oracle Linux 6 : thunderbird (ELSA-2012-0516)NessusOracle Linux Local Security Checks
critical
68517Oracle Linux 5 / 6 : firefox (ELSA-2012-0515)NessusOracle Linux Local Security Checks
critical
801359Mozilla Firefox <= 11 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
high
801320Mozilla SeaMonkey 2.x < 2.9.0 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
high
801261Mozilla Thunderbird < 12 Multiple VulnerabilitiesLog Correlation EngineSMTP Clients
high
6792Mozilla Thunderbird < 12.0 Multiple VulnerabilitiesNessus Network MonitorSMTP Clients
high
6791SeaMonkey 2.x < 2.9.0 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
6790Mozilla Firefox < 12.0 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
63402GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)NessusGentoo Local Security Checks
critical
61306Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120424)NessusScientific Linux Local Security Checks
critical
61304Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20120424)NessusScientific Linux Local Security Checks
critical
59354SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 8154)NessusSuSE Local Security Checks
critical
59015Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : thunderbird vulnerabilities (USN-1430-3)NessusUbuntu Local Security Checks
critical
58978Debian DSA-2464-2 : icedove - several vulnerabilitiesNessusDebian Local Security Checks
critical
58973SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6224)NessusSuSE Local Security Checks
critical
58923Ubuntu 10.04 LTS / 11.04 / 11.10 : ubufox update (USN-1430-2)NessusUbuntu Local Security Checks
critical
58922Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : firefox vulnerabilities (USN-1430-1)NessusUbuntu Local Security Checks
critical
58921Mandriva Linux Security Advisory : mozilla (MDVSA-2012:066)NessusMandriva Local Security Checks
critical
58901SeaMonkey < 2.9.0 Multiple VulnerabilitiesNessusWindows
high
58900Mozilla Thunderbird < 12.0 Multiple VulnerabilitiesNessusWindows
high
58899Mozilla Thunderbird 10.0.x < 10.0.4 Multiple VulnerabilitiesNessusWindows
high
58898Firefox < 12.0 Multiple VulnerabilitiesNessusWindows
high
58897Firefox 10.0.x < 10.0.4 Multiple VulnerabilitiesNessusWindows
high
58896Thunderbird < 12.0 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
high
58895Thunderbird 10.0.x < 10.0.4 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
high
58894Firefox < 12.0 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
high
58893Firefox < 10.0.4 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
high
58868RHEL 5 / 6 : thunderbird (RHSA-2012:0516)NessusRed Hat Local Security Checks
critical
58867RHEL 5 / 6 : firefox (RHSA-2012:0515)NessusRed Hat Local Security Checks
critical
58864FreeBSD : mozilla -- multiple vulnerabilities (380e8c56-8e32-11e1-9580-4061862b8c22)NessusFreeBSD Local Security Checks
critical
58855Debian DSA-2458-2 : iceape - several vulnerabilitiesNessusDebian Local Security Checks
critical
58854Debian DSA-2457-2 : iceweasel - several vulnerabilitiesNessusDebian Local Security Checks
critical
58851CentOS 5 / 6 : firefox / thunderbird (CESA-2012:0516)NessusCentOS Local Security Checks
critical
58850CentOS 5 / 6 : firefox (CESA-2012:0515)NessusCentOS Local Security Checks
critical