CVE-2012-3995

심각 9.3CVE-2012-3995 · Published 10/10/2012 · updated 16/06/2026

요약

CVE-2012-3995은(는) firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla)에 영향을 주는 심각 (CVSS 9.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 5.0%, 전체 취약점의 92.3%보다 높음.
조치: 10.0.8, 16.0, 2.13 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
firefox mozilla	`< 10.0.8< 16.0`	`10.0.816.0`
seamonkey mozilla	`< 2.13`	`2.13`
thunderbird mozilla	`< 16.0`	`16.0`
thunderbird esr mozilla	`< 10.0.8`	`10.0.8`

Description

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1351.html · Third Party Advisory
secunia.com/advisories/50856 · Third Party Advisory
secunia.com/advisories/50892 · Third Party Advisory
secunia.com/advisories/50904 · Third Party Advisory
secunia.com/advisories/50935 · Third Party Advisory
secunia.com/advisories/50936 · Third Party Advisory
secunia.com/advisories/50984 · Third Party Advisory
secunia.com/advisories/55318 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mozilla.org/security/announce/2012/mfsa2012-85.html · Vendor Advisory
securityfocus.com/bid/56136 · Third Party Advisory

firefox의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 10.0.8< 16.0

10.0.816.0

seamonkey

mozilla

< 2.13

2.13

thunderbird

mozilla

< 16.0

16.0

thunderbird esr

mozilla

< 10.0.8

10.0.8

Description

firefox의 다른 취약점

모두 보기 →