Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2012-1948

Опубликовано: 18 июл. 2012
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 9.3

Описание

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.

РелизСтатусПримечание
devel

not-affected

14.0.1+build1-0ubuntu2
hardy

ignored

end of life
lucid

released

14.0.1+build1-0ubuntu0.10.04.1
natty

released

14.0.1+build1-0ubuntu0.11.04.1
oneiric

released

14.0.1+build1-0ubuntu0.11.10.1
precise

released

14.0.1+build1-0ubuntu0.12.04.1
quantal

not-affected

14.0.1+build1-0ubuntu2
raring

not-affected

14.0.1+build1-0ubuntu2
saucy

not-affected

14.0.1+build1-0ubuntu2
upstream

released

14

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
natty

ignored

end of life
oneiric

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

14.0+build1-0ubuntu2
hardy

ignored

end of life
lucid

released

14.0+build1-0ubuntu0.10.04.1
natty

released

14.0+build1-0ubuntu0.11.04.1
oneiric

released

14.0+build1-0ubuntu0.11.10.1
precise

released

14.0+build1-0ubuntu0.12.04.1
quantal

not-affected

14.0+build1-0ubuntu2
raring

not-affected

14.0+build1-0ubuntu2
saucy

not-affected

14.0+build1-0ubuntu2
upstream

released

14

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
natty

ignored

end of life
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

DNE

lucid

DNE

natty

ignored

end of life
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 88%
0.03749
Низкий

9.3 Critical

CVSS2

Связанные уязвимости

redhat
около 13 лет назад

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

nvd
около 13 лет назад

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

debian
около 13 лет назад

Multiple unspecified vulnerabilities in the browser engine in Mozilla ...

github
больше 3 лет назад

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

oracle-oval
около 13 лет назад

ELSA-2012-1089: thunderbird security update (CRITICAL)

EPSS

Процентиль: 88%
0.03749
Низкий

9.3 Critical

CVSS2