Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2012-0457

Опубликовано: 14 мар. 2012
Источник: ubuntu
Приоритет: medium
CVSS2: 9.3

Описание

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.

РелизСтатусПримечание
devel

not-affected

hardy

ignored

end of life
lucid

released

11.0+build1-0ubuntu0.10.04.2
maverick

released

11.0+build1-0ubuntu0.10.10.2
natty

released

11.0+build1-0ubuntu0.11.04.1
oneiric

released

11.0+build1-0ubuntu0.11.10.1
precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
maverick

ignored

end of life
natty

ignored

end of life
oneiric

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

hardy

ignored

end of life
lucid

released

3.1.20+build1+nobinonly-0ubuntu0.10.04.1
maverick

released

3.1.20+build1+nobinonly-0ubuntu0.10.10.1
natty

released

3.1.20+build1+nobinonly-0ubuntu0.11.04.1
oneiric

released

11.0+build1-0ubuntu0.11.10.1
precise

not-affected

quantal

not-affected

raring

not-affected

saucy

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

released

1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1
maverick

released

1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1
natty

released

1.9.2.28+build1+nobinonly-0ubuntu0.11.04.1
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

DNE

lucid

DNE

maverick

DNE

natty

ignored

end of life
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

9.3 Critical

CVSS2

Связанные уязвимости

redhat
больше 13 лет назад

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.

nvd
больше 13 лет назад

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.

debian
больше 13 лет назад

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetwee ...

github
больше 3 лет назад

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.

oracle-oval
больше 13 лет назад

ELSA-2012-0388: thunderbird security update (CRITICAL)

9.3 Critical

CVSS2