Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2012-0496 | Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection. |
Ubuntu USN |
USN-1400-1 | Firefox vulnerabilities |
Ubuntu USN |
USN-1400-3 | Thunderbird vulnerabilities |
Ubuntu USN |
USN-1401-1 | Xulrunner vulnerabilities |
Ubuntu USN |
USN-1401-2 | Thunderbird vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 21 Oct 2024 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:* |
| Vendors & Products |
Mozilla firefox Esr
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T18:23:30.994Z
Reserved: 2012-01-09T00:00:00
Link: CVE-2012-0464
No data.
Status : Deferred
Published: 2012-03-14T19:55:02.337
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-0464
OpenCVE Enrichment
No data.
EUVD
Ubuntu USN