CVE-2012-4185: mozilla firefox – CVSS 9.3 · Watchpost

← All vulnerabilities

CVE-2012-4185

严重 9.3CVE-2012-4185 · Published 10/10/2012 · updated 16/06/2026

要点

CVE-2012-4185 是影响 firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla) 的严重 (CVSS 9.3)漏洞。
未来 30 天内被利用的概率（EPSS）：8.6%，高于 95.1% 的漏洞。
修复：升级到 10.0.8, 16.0, 2.13 或更高版本。

Package	Affected versions	Patched versions
firefox mozilla	`< 10.0.8< 16.0`	`10.0.816.0`
seamonkey mozilla	`< 2.13`	`2.13`
thunderbird mozilla	`< 16.0`	`16.0`
thunderbird esr mozilla	`< 10.0.8`	`10.0.8`

Description

Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html · Mailing List
osvdb.org/86116 · Broken Link
rhn.redhat.com/errata/RHSA-2012-1351.html · Third Party Advisory
secunia.com/advisories/50856 · Third Party Advisory
secunia.com/advisories/50892 · Third Party Advisory
secunia.com/advisories/50904 · Third Party Advisory
secunia.com/advisories/50935 · Third Party Advisory
secunia.com/advisories/50936 · Third Party Advisory
secunia.com/advisories/50984 · Third Party Advisory
secunia.com/advisories/55318 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
mozilla.org/security/announce/2012/mfsa2012-86.html · Vendor Advisory
securityfocus.com/bid/56127

firefox 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free