Логотип exploitDog
bind:"GHSA-9g4c-vw2f-x5wq" OR bind:"CVE-2012-3970"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-9g4c-vw2f-x5wq" OR bind:"CVE-2012-3970"

Количество 7

Количество 7

github логотип

GHSA-9g4c-vw2f-x5wq

больше 3 лет назад

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

EPSS: Низкий
ubuntu логотип

CVE-2012-3970

почти 13 лет назад

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

CVSS2: 10
EPSS: Низкий
redhat логотип

CVE-2012-3970

почти 13 лет назад

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2012-3970

почти 13 лет назад

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

CVSS2: 10
EPSS: Низкий
debian логотип

CVE-2012-3970

почти 13 лет назад

Use-after-free vulnerability in the nsTArray_base::Length function in ...

CVSS2: 10
EPSS: Низкий
oracle-oval логотип

ELSA-2012-1211

почти 13 лет назад

ELSA-2012-1211: thunderbird security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1210

почти 13 лет назад

ELSA-2012-1210: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-9g4c-vw2f-x5wq

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

3%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2012-3970

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

CVSS2: 10
3%
Низкий
почти 13 лет назад
redhat логотип
CVE-2012-3970

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

CVSS2: 6.8
3%
Низкий
почти 13 лет назад
nvd логотип
CVE-2012-3970

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.

CVSS2: 10
3%
Низкий
почти 13 лет назад
debian логотип
CVE-2012-3970

Use-after-free vulnerability in the nsTArray_base::Length function in ...

CVSS2: 10
3%
Низкий
почти 13 лет назад
oracle-oval логотип
ELSA-2012-1211

ELSA-2012-1211: thunderbird security update (CRITICAL)

почти 13 лет назад
oracle-oval логотип
ELSA-2012-1210

ELSA-2012-1210: firefox security update (CRITICAL)

почти 13 лет назад

Уязвимостей на страницу