CVE-2012-4216

CRITICAL 9.3CVE-2012-4216 · Published 21/11/2012 · updated 16/06/2026

In short

CVE-2012-4216 is a CRITICAL (CVSS 9.3) vulnerability affecting firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 6.1%, higher than 93.4% of all vulnerabilities.
Fix: update to 10.0.11, 17.0, 2.14 or later.

Package	Affected versions	Patched versions
firefox mozilla	`≥ 10.0, < 10.0.11< 17.0`	`10.0.1117.0`
seamonkey mozilla	`< 2.14`	`2.14`
thunderbird mozilla	`< 17.0`	`17.0`
thunderbird esr mozilla	`≥ 10.0, < 10.0.11`	`10.0.11`

Description

Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00090.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00092.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html · Mailing List
osvdb.org/87609 · Broken Link
rhn.redhat.com/errata/RHSA-2012-1482.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1483.html · Third Party Advisory
secunia.com/advisories/51359 · Third Party Advisory
secunia.com/advisories/51360 · Third Party Advisory
secunia.com/advisories/51369 · Third Party Advisory
secunia.com/advisories/51370

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free