critical9.3
CVE-2012-1938
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote atta…
Impact
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 13.0 |
| Mozilla | Seamonkey | before 2.10 |
| Mozilla | Thunderbird | before 13.0 |
| Opensuse | Opensuse | Versions 11.4, 12.1 |
| Suse | Linux Enterprise Desktop | Versions 10, 11 |
| Suse | Linux Enterprise Server | Versions 10, 11 |
| Suse | Linux Enterprise Software Development Kit | Versions 10, 11 |
| Redhat | Storage | Version 2.0 |
| Redhat | Enterprise Linux Desktop | Versions 5.0, 6.0 |
| Redhat | Enterprise Linux Eus | Version 6.2 |
| Redhat | Enterprise Linux Server | Versions 5.0, 6.0 |
| Redhat | Enterprise Linux Server Aus | Version 6.2 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html
- http://rhn.redhat.com/errata/RHSA-2012-0710.html
- http://rhn.redhat.com/errata/RHSA-2012-0715.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:088
- http://www.mozilla.org/security/announce/2012/mfsa2012-34.html
- http://www.securityfocus.com/bid/53796
- https://bugzilla.mozilla.org/show_bug.cgi?id=670317
- https://bugzilla.mozilla.org/show_bug.cgi?id=699594
- https://bugzilla.mozilla.org/show_bug.cgi?id=708688
- https://bugzilla.mozilla.org/show_bug.cgi?id=716067
- https://bugzilla.mozilla.org/show_bug.cgi?id=718852
- https://bugzilla.mozilla.org/show_bug.cgi?id=723773
- https://bugzilla.mozilla.org/show_bug.cgi?id=723971
- https://bugzilla.mozilla.org/show_bug.cgi?id=730415
- https://bugzilla.mozilla.org/show_bug.cgi?id=736012
- https://bugzilla.mozilla.org/show_bug.cgi?id=748948
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17058
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html
- http://rhn.redhat.com/errata/RHSA-2012-0710.html
- http://rhn.redhat.com/errata/RHSA-2012-0715.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:088
- http://www.mozilla.org/security/announce/2012/mfsa2012-34.html
- http://www.securityfocus.com/bid/53796