CVE-2012-1939high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
References
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html
http://rhn.redhat.com/errata/RHSA-2012-0710.html
http://rhn.redhat.com/errata/RHSA-2012-0715.html
http://www.debian.org/security/2012/dsa-2499
http://www.mandriva.com/security/advisories?name=MDVSA-2012:088
http://www.mozilla.org/security/announce/2012/mfsa2012-34.html
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:*
Configuration 2
OR
cpe:2.3:a:mozilla:thunderbird_esr:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 68536 | Oracle Linux 6 : thunderbird (ELSA-2012-0715) | Nessus | Oracle Linux Local Security Checks | critical |
| 68535 | Oracle Linux 5 / 6 : firefox (ELSA-2012-0710) | Nessus | Oracle Linux Local Security Checks | critical |
| 64208 | SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6425) | Nessus | SuSE Local Security Checks | critical |
| 63402 | GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST) | Nessus | Gentoo Local Security Checks | critical |
| 59777 | Debian DSA-2499-1 : icedove - several vulnerabilities | Nessus | Debian Local Security Checks | high |
| 59681 | Mandriva Linux Security Advisory : mozilla (MDVSA-2012:088-1) | Nessus | Mandriva Local Security Checks | critical |
| 59520 | SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8189) | Nessus | SuSE Local Security Checks | critical |
| 801375 | Mozilla SeaMonkey 2.x < 2.10 Multiple Vulnerabilities | Log Correlation Engine | Web Clients | high |
| 6496 | SeaMonkey 2.x < 2.10 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 59412 | CentOS 5 / 6 : thunderbird (CESA-2012:0715) | Nessus | CentOS Local Security Checks | critical |
| 801297 | Mozilla Firefox 12.x < 12 Multiple Vulnerabilities | Log Correlation Engine | Web Clients | high |
| 801240 | Mozilla Thunderbird 12.x < 12 Multiple Vulnerabilities | Log Correlation Engine | SMTP Clients | high |
| 6498 | Mozilla Thunderbird < 13.0 Multiple Vulnerabilities | Nessus Network Monitor | SMTP Clients | high |
| 6497 | Mozilla Firefox < 13.0 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 59410 | Mozilla Thunderbird 10.0.x < 10.0.5 Multiple Vulnerabilities | Nessus | Windows | high |
| 59408 | Firefox 10.0.x < 10.0.5 Multiple Vulnerabilities | Nessus | Windows | high |
| 59406 | Thunderbird 10.0.x < 10.0.5 Multiple Vulnerabilities (Mac OS X) | Nessus | MacOS X Local Security Checks | high |
| 59404 | Firefox < 10.0.5 Multiple Vulnerabilities (Mac OS X) | Nessus | MacOS X Local Security Checks | high |
| 59392 | RHEL 5 / 6 : thunderbird (RHSA-2012:0715) | Nessus | Red Hat Local Security Checks | critical |
| 59388 | CentOS 5 / 6 : firefox (CESA-2012:0710) | Nessus | CentOS Local Security Checks | critical |
| 59383 | RHEL 5 / 6 : firefox (RHSA-2012:0710) | Nessus | Red Hat Local Security Checks | critical |
| 59381 | FreeBSD : mozilla -- multiple vulnerabilities (bfecf7c1-af47-11e1-9580-4061862b8c22) | Nessus | FreeBSD Local Security Checks | critical |