NetSight
IP …
critical10.0

CVE-2012-3956

Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird be…

Impact

Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Affected products

VendorProductAffected versions
MozillaFirefox
before 15.0
from 10.0 before 10.0.7
MozillaSeamonkey
before 2.12
MozillaThunderbird
before 15.0
MozillaThunderbird Esr
from 10.0 before 10.0.7
OpensuseOpensuse
Version 12.2
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Server
Versions 10, 11
SuseLinux Enterprise Software Development Kit
Version 11
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.3
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Eus
Version 6.3

Weakness classification

CWE-416

References