Buffer overflow in Mozilla Firefox
CVE-2012-0444
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
Vulnerability class: Buffer Overflow
EPSS: 0.079 (94.1th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox
- Mozilla Seamonkey
- Mozilla Thunderbird
- Canonical Ubuntu_linux — versions 10.04, 10.10, 11.04
- Debian Debian_linux — versions 5.0, 6.0
- Opensuse — versions 11.4
- Suse Linux_enterprise_desktop — versions 10, 11
- Suse Linux_enterprise_server — versions 10, 11
- Suse Linux_enterprise_software_development_kit — versions 10, 11
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)