PT-2012-2582

CVE-2012-0461

·

Published

2012-03-13

·

Updated

2024-12-12

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.28 and 4.x through 10.0 Firefox ESR 10.x versions prior to 10.0.3 Thunderbird versions prior to 3.1.20 and 5.0 through 10.0 Thunderbird ESR 10.x versions prior to 10.0.3 SeaMonkey versions prior to 2.8
Description The issue allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Recommendations For Mozilla Firefox versions prior to 3.6.28, update to version 3.6.28 or later. For Mozilla Firefox versions 4.x through 10.0, update to version 10.0 or later. For Firefox ESR 10.x versions prior to 10.0.3, update to version 10.0.3 or later. For Thunderbird versions prior to 3.1.20, update to version 3.1.20 or later. For Thunderbird versions 5.0 through 10.0, update to version 10.0 or later. For Thunderbird ESR 10.x versions prior to 10.0.3, update to version 10.0.3 or later. For SeaMonkey versions prior to 2.8, update to version 2.8 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CESA-2012_0387
CESA-2012_0388
DSA-2433-1
DSA-2437-1
DSA-2458-1
OPENSUSE-SU-2014_1100-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:10230-1
OPENSUSE-SU-2024:14572-1
RHSA-2012:0387
RHSA-2012_0387
RHSA-2012:0388
RHSA-2012_0388
Found an issue in the description? Have something to add? Feel free to write us 👾