CVE-2012-3990

NGHIÊM TRỌNG 9.3CVE-2012-3990 · Công bố 10/10/2012 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2012-3990 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 9.3) ảnh hưởng firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 5.2%, cao hơn 92.5% các lỗ hổng khác.
Cách xử lý: cập nhật lên 10.0.8, 16.0, 2.13 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
firefox mozilla	`< 10.0.8< 16.0`	`10.0.816.0`
seamonkey mozilla	`< 2.13`	`2.13`
thunderbird mozilla	`< 16.0`	`16.0`
thunderbird esr mozilla	`< 10.0.8`	`10.0.8`

Mô tả

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

Tham khảo

lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html · Mailing List
rhn.redhat.com/errata/RHSA-2012-1351.html · Third Party Advisory
secunia.com/advisories/50856 · Third Party Advisory
secunia.com/advisories/50892 · Third Party Advisory
secunia.com/advisories/50904 · Third Party Advisory
secunia.com/advisories/50935 · Third Party Advisory
secunia.com/advisories/50936 · Third Party Advisory
secunia.com/advisories/50984 · Third Party Advisory
secunia.com/advisories/51181 · Third Party Advisory
secunia.com/advisories/55318 · Third Party Advisory
debian.org/security/2012/dsa-2565 · Third Party Advisory
debian.org/security/2012/dsa-2569 · Third Party Advisory
debian.org/security/2012/dsa-2572 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mozilla.org/security/announce/2012/mfsa2012-87.html · Vendor Advisory
ubuntu.com/usn/USN-1611-1 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/79172 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642 · Third Party Advisory

Lỗ hổng khác của firefox

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí