Vulnerability in Mozilla Firefox
CVE-2012-1938
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox
- Mozilla Seamonkey
- Mozilla Thunderbird
- Opensuse — versions 11.4, 12.1
- Redhat Enterprise_linux_desktop — versions 5.0, 6.0
- Redhat Enterprise_linux_eus — versions 6.2
- Redhat Enterprise_linux_server — versions 5.0, 6.0
- Redhat Enterprise_linux_server_aus — versions 6.2
- Redhat Enterprise_linux_workstation — versions 5.0, 6.0
- Redhat Storage — versions 2.0
References
- cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Issue Tracking, Vendor Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Issue Tracking, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)