NetSight
IP …
critical10.0

CVE-2012-0444

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildVi…

Impact

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

Affected products

VendorProductAffected versions
MozillaFirefox
before 3.6.26
from 4.0 before 10.0
MozillaSeamonkey
before 2.7
MozillaThunderbird
before 3.1.18
from 5.0 before 10.0
DebianDebian Linux
Versions 5.0, 6.0
OpensuseOpensuse
Version 11.4
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Server
Versions 10, 11
SuseLinux Enterprise Software Development Kit
Versions 10, 11
CanonicalUbuntu Linux
Versions 10.04, 10.10, 11.04, 11.10

Weakness classification

CWE-119

References