Cloudanix VulnDB

CVE-2012-0470

None

CVSS

—

EPSS

10.3%

Published

Apr 25, 2012

CISA due date

—

The record

Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."

Affected packages

Ecosystem Package Introduced Fixed
Debian:6.0 iceape 0 2.0.11-11
Debian:6.0 icedove 0 3.0.11-1+squeeze9
Debian:6.0 iceweasel 0 3.5.16-14
Red Hat:enterprise_linux:5::client firefox 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client firefox-debuginfo 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client thunderbird 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client thunderbird-debuginfo 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client xulrunner 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client xulrunner-debuginfo 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client xulrunner-devel 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client_workstation xulrunner 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client_workstation xulrunner-debuginfo 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::client_workstation xulrunner-devel 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::server firefox 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::server firefox-debuginfo 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::server xulrunner 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::server xulrunner-debuginfo 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:5::server xulrunner-devel 0 0:10.0.4-1.el5_8
Red Hat:enterprise_linux:6::client firefox 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::client firefox-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::client thunderbird 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::client thunderbird-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::client xulrunner 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::client xulrunner-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::client xulrunner-devel 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::computenode firefox 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::computenode firefox-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::computenode xulrunner 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::computenode xulrunner-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::computenode xulrunner-devel 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server firefox 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server firefox-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server thunderbird 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server thunderbird-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server xulrunner 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server xulrunner-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::server xulrunner-devel 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation firefox 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation firefox-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation thunderbird 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation thunderbird-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation xulrunner 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation xulrunner-debuginfo 0 0:10.0.4-1.el6_2
Red Hat:enterprise_linux:6::workstation xulrunner-devel 0 0:10.0.4-1.el6_2
Red Hat:rhel_productivity:5 thunderbird 0 0:10.0.4-1.el5_8
Red Hat:rhel_productivity:5 thunderbird-debuginfo 0 0:10.0.4-1.el5_8
openSUSE:Tumbleweed MozillaFirefox 0 50.1.0-1.1
openSUSE:Tumbleweed MozillaThunderbird 0 45.5.1-1.1
openSUSE:Tumbleweed firefox-esr 0 128.5.1-1.1

Related vulnerabilities