critical9.3
CVE-2012-1939
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attack…
Impact
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4 |
| Mozilla | Thunderbird Esr | Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2012-0710.html
- http://rhn.redhat.com/errata/RHSA-2012-0715.html
- http://www.debian.org/security/2012/dsa-2499
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:088
- http://www.mozilla.org/security/announce/2012/mfsa2012-34.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=748613
- http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html
- http://rhn.redhat.com/errata/RHSA-2012-0710.html
- http://rhn.redhat.com/errata/RHSA-2012-0715.html
- http://www.debian.org/security/2012/dsa-2499
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:088
- http://www.mozilla.org/security/announce/2012/mfsa2012-34.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=748613