Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2012-3990

Опубликовано: 10 окт. 2012
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 9.3

Описание

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

РелизСтатусПримечание
devel

released

16.0+build1-0ubuntu1
hardy

ignored

end of life
lucid

released

16.0+build1-0ubuntu0.10.04.1
natty

released

16.0+build1-0ubuntu0.11.04.1
oneiric

released

16.0+build1-0ubuntu0.11.10.1
precise

released

16.0+build1-0ubuntu0.12.04.1
quantal

released

16.0+build1-0ubuntu1
raring

released

16.0+build1-0ubuntu1
saucy

released

16.0+build1-0ubuntu1
upstream

released

16.0

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
natty

ignored

end of life
oneiric

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

upstream

released

2.13

Показывать по

РелизСтатусПримечание
devel

released

16.0.1+build1-0ubuntu1
hardy

ignored

end of life
lucid

released

16.0+build1-0ubuntu0.10.04.1
natty

released

16.0+build1-0ubuntu0.11.04.1
oneiric

released

16.0+build1-0ubuntu0.11.10.1
precise

released

16.0+build1-0ubuntu0.12.04.1
quantal

released

16.0.1+build1-0ubuntu1
raring

released

16.0.1+build1-0ubuntu1
saucy

released

16.0.1+build1-0ubuntu1
upstream

released

16.0

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
natty

ignored

end of life
oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 90%
0.05468
Низкий

9.3 Critical

CVSS2

Связанные уязвимости

redhat
почти 13 лет назад

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

nvd
почти 13 лет назад

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

debian
почти 13 лет назад

Use-after-free vulnerability in the IME State Manager implementation i ...

github
больше 3 лет назад

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

oracle-oval
почти 13 лет назад

ELSA-2012-1351: thunderbird security update (CRITICAL)

EPSS

Процентиль: 90%
0.05468
Низкий

9.3 Critical

CVSS2