Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2012-0444

Опубликовано: 01 фев. 2012
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 10

Описание

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

РелизСтатусПримечание
devel

not-affected

hardy

ignored

end of life
lucid

released

10.0+build1-0ubuntu0.10.04.2
maverick

released

10.0+build1-0ubuntu0.10.10.1
natty

released

10.0+build1-0ubuntu0.11.04.1
oneiric

released

10.0+build1-0ubuntu0.11.10.1
precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

Показывать по

РелизСтатусПримечание
devel

released

1.3.2-1ubuntu3
hardy

ignored

end of life
lucid

released

1.2.3-3ubuntu1.1
maverick

released

1.3.1-1ubuntu0.1
natty

released

1.3.2-1ubuntu1.1
oneiric

released

1.3.2-1ubuntu2.1
precise

released

1.3.2-1ubuntu3
quantal

released

1.3.2-1ubuntu3
raring

released

1.3.2-1ubuntu3
saucy

released

1.3.2-1ubuntu3

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
maverick

ignored

end of life
natty

ignored

end of life
oneiric

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

hardy

ignored

end of life
lucid

released

3.1.18+build2+nobinonly-0ubuntu0.10.04.1
maverick

released

3.1.18+build2+nobinonly-0ubuntu0.10.10.1
natty

released

3.1.18+build2+nobinonly-0ubuntu0.11.04.1
oneiric

released

10.0.2+build1-0ubuntu0.11.10.1
precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

released

1.9.2.26+build2+nobinonly-0ubuntu0.10.04.1
maverick

released

1.9.2.26+build2+nobinonly-0ubuntu0.10.10.1
natty

released

1.9.2.27+build1+nobinonly-0ubuntu0.11.04.1
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

DNE

lucid

DNE

maverick

DNE

natty

ignored

end of life
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

EPSS

Процентиль: 84%
0.02228
Низкий

10 Critical

CVSS2

Связанные уязвимости

redhat
больше 13 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

nvd
больше 13 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

debian
больше 13 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before ...

github
больше 3 лет назад

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

oracle-oval
больше 13 лет назад

ELSA-2012-0136: libvorbis security update (IMPORTANT)

EPSS

Процентиль: 84%
0.02228
Низкий

10 Critical

CVSS2