Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html

http://rhn.redhat.com/errata/RHSA-2012-0710.html

http://rhn.redhat.com/errata/RHSA-2012-0715.html

http://www.debian.org/security/2012/dsa-2488

http://www.debian.org/security/2012/dsa-2489

http://www.debian.org/security/2012/dsa-2499

http://www.mandriva.com/security/advisories?name=MDVSA-2012:088

http://www.mozilla.org/security/announce/2012/mfsa2012-34.html

https://bugzilla.mozilla.org/show_bug.cgi?id=643967

https://bugzilla.mozilla.org/show_bug.cgi?id=723465

https://bugzilla.mozilla.org/show_bug.cgi?id=745254

https://bugzilla.mozilla.org/show_bug.cgi?id=745494

https://bugzilla.mozilla.org/show_bug.cgi?id=745580

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17055

Details

Risk Information

CVSS v2