CVE-2012-3988

심각 9.3CVE-2012-3988 · Published 10/10/2012 · updated 16/06/2026

요약

CVE-2012-3988은(는) firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla)에 영향을 주는 심각 (CVSS 9.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 5.2%, 전체 취약점의 92.5%보다 높음.
조치: 10.0.8, 16.0, 2.13 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
firefox mozilla	`< 10.0.8< 16.0`	`10.0.816.0`
seamonkey mozilla	`< 2.13`	`2.13`
thunderbird mozilla	`< 16.0`	`16.0`
thunderbird esr mozilla	`< 10.0.8`	`10.0.8`

Description

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.

References

lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html · Third Party Advisory
osvdb.org/86109 · Broken Link
rhn.redhat.com/errata/RHSA-2012-1351.html · Third Party Advisory
secunia.com/advisories/50856 · Third Party Advisory
secunia.com/advisories/50892 · Third Party Advisory
secunia.com/advisories/50904 · Third Party Advisory
secunia.com/advisories/50935 · Third Party Advisory
secunia.com/advisories/50936 · Third Party Advisory
secunia.com/advisories/50984 · Third Party Advisory
secunia.com/advisories/55318 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mozilla.org/security/announce/2012/mfsa2012-79.html · Vendor Advisory
ubuntu.com/usn/USN-1611-1

firefox의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 10.0.8< 16.0

10.0.816.0

seamonkey

mozilla

< 2.13

2.13

thunderbird

mozilla

< 16.0

16.0

thunderbird esr

mozilla

< 10.0.8

10.0.8

Description

firefox의 다른 취약점

모두 보기 →