CVE-2012-5829

NGHIÊM TRỌNG 9.3CVE-2012-5829 · Công bố 21/11/2012 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2012-5829 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 9.3) ảnh hưởng firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 8.4%, cao hơn 95.0% các lỗ hổng khác.
Cách xử lý: cập nhật lên 10.0.11, 17.0, 2.14 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
firefox mozilla	`≥ 10.0, < 10.0.11< 17.0`	`10.0.1117.0`
seamonkey mozilla	`< 2.14`	`2.14`
thunderbird mozilla	`< 17.0`	`17.0`
thunderbird esr mozilla	`≥ 10.0, < 10.0.11`	`10.0.11`

Mô tả

Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.

Tham khảo

lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00090.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00092.html · Mailing List
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html · Mailing List
osvdb.org/87608 · Broken Link
rhn.redhat.com/errata/RHSA-2012-1482.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1483.html · Third Party Advisory
secunia.com/advisories/51359 · Third Party Advisory
secunia.com/advisories/51360 · Third Party Advisory
secunia.com/advisories/51369 · Third Party Advisory
secunia.com/advisories/51370 · Third Party Advisory
secunia.com/advisories/51381 · Third Party Advisory
secunia.com/advisories/51434 · Third Party Advisory
secunia.com/advisories/51439 · Third Party Advisory
secunia.com/advisories/51440 · Third Party Advisory
debian.org/security/2012/dsa-2583 · Third Party Advisory
debian.org/security/2012/dsa-2584 · Third Party Advisory
debian.org/security/2012/dsa-2588 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mozilla.org/security/announce/2012/mfsa2012-105.html · Not Applicable
mozilla.org/security/announce/2013/mfsa2013-02.html · Vendor Advisory
securityfocus.com/bid/56636 · Third Party Advisory
ubuntu.com/usn/USN-1636-1 · Third Party Advisory
ubuntu.com/usn/USN-1638-1 · Third Party Advisory
ubuntu.com/usn/USN-1638-2 · Third Party Advisory
ubuntu.com/usn/USN-1638-3 · Third Party Advisory
ubuntu.com/usn/USN-1681-1 · Third Party Advisory
ubuntu.com/usn/USN-1681-2 · Third Party Advisory
ubuntu.com/usn/USN-1681-4 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/80195 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16849 · Third Party Advisory

Lỗ hổng khác của firefox

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí