CVE-2012-3967

Опубликовано: 29 авг. 2012

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1210.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1211.html
Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-62.html
Vendor Advisory
http://www.securityfocus.com/bid/55277
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1548-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1548-2
Third Party Advisory
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=777028
Exploit
Issue Tracking
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1210.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1211.html
Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-62.html
Vendor Advisory
http://www.securityfocus.com/bid/55277
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1548-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1548-2
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.0.7 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия до 2.12 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.0.7 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

EPSS

Процентиль: 68%

0.00593

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2012-3967

ubuntu

почти 13 лет назад

CVE-2012-3967

redhat

почти 13 лет назад

CVE-2012-3967

debian

почти 13 лет назад

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 1 ...

GHSA-pfgj-fg47-5ff5

github

больше 3 лет назад

ELSA-2012-1211

oracle-oval

почти 13 лет назад

ELSA-2012-1211: thunderbird security update (CRITICAL)

EPSS

Процентиль: 68%

0.00593

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-787