CVE-2012-5840

CRÍTICO 9.3CVE-2012-5840 · Published 21/11/2012 · updated 16/06/2026

Em resumo

CVE-2012-5840 é uma vulnerabilidade CRÍTICO (CVSS 9.3) que afeta firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Chance de exploração nos próximos 30 dias (EPSS): 6.1%, maior que 93.4% das vulnerabilidades.
Correção: atualize para 10.0.11, 17.0, 2.14 ou posterior.

Package	Affected versions	Patched versions
firefox mozilla	`< 10.0.11< 17.0`	`10.0.1117.0`
seamonkey mozilla	`< 2.14`	`2.14`
thunderbird mozilla	`< 17.0`	`17.0`
thunderbird esr mozilla	`< 10.0.11`	`10.0.11`

Description

Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.

References

lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00090.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00092.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html · Mailing List
osvdb.org/87606 · Broken Link
rhn.redhat.com/errata/RHSA-2012-1482.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1483.html · Third Party Advisory
secunia.com/advisories/51359 · Third Party Advisory
secunia.com/advisories/51360 · Third Party Advisory
secunia.com/advisories/51369 · Third Party Advisory
secunia.com/advisories/51370

Mais vulnerabilidades de firefox

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free