CVE-2012-5839

CRITIQUE 9.3CVE-2012-5839 · Published 21/11/2012 · updated 16/06/2026

En bref

CVE-2012-5839 est une vulnérabilité CRITIQUE (CVSS 9.3) touchant firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 7.0%, plus élevée que 94.2% des vulnérabilités.
Correctif : mettre à jour vers 10.0.11, 17.0, 2.14 ou plus récent.

Package	Affected versions	Patched versions
firefox mozilla	`< 10.0.11< 17.0`	`10.0.1117.0`
seamonkey mozilla	`< 2.14`	`2.14`
thunderbird mozilla	`< 17.0`	`17.0`
thunderbird esr mozilla	`< 10.0.11`	`10.0.11`

Description

Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00090.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00092.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html · Mailing List
osvdb.org/87607 · Broken Link
rhn.redhat.com/errata/RHSA-2012-1482.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1483.html · Third Party Advisory
secunia.com/advisories/51359 · Third Party Advisory
secunia.com/advisories/51360 · Third Party Advisory
secunia.com/advisories/51369 · Third Party Advisory
secunia.com/advisories/51370

Autres vulnérabilités de firefox

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free