Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-0449

Опубликовано: 31 янв. 2012
Источник: redhat
CVSS2: 6.8
EPSS Средний

Описание

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5thunderbirdAffected
Red Hat Enterprise Linux 4firefoxFixedRHSA-2012:007901.02.2012
Red Hat Enterprise Linux 5firefoxFixedRHSA-2012:007901.02.2012
Red Hat Enterprise Linux 5xulrunnerFixedRHSA-2012:007901.02.2012
Red Hat Enterprise Linux 6firefoxFixedRHSA-2012:007901.02.2012
Red Hat Enterprise Linux 6xulrunnerFixedRHSA-2012:007901.02.2012
Red Hat Enterprise Linux 6thunderbirdFixedRHSA-2012:008031.01.2012

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=785966Mozilla: Crash when rendering SVG+XSLT (MFSA 2012-08)

EPSS

Процентиль: 93%
0.10935
Средний

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 13 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.

nvd
больше 13 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.

debian
больше 13 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before ...

github
больше 3 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.

oracle-oval
больше 13 лет назад

ELSA-2012-0080: thunderbird security update (CRITICAL)

EPSS

Процентиль: 93%
0.10935
Средний

6.8 Medium

CVSS2

Уязвимость CVE-2012-0449