CVE-2012-4188
NoneCVSS
—
EPSS
14.7%
Published
Oct 10, 2012
CISA due date
—
The record
Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | iceape | 0 | 2.0.11-16 |
| Debian:6.0 | icedove | 0 | 3.0.11-1+squeeze14 |
| Debian:6.0 | iceweasel | 0 | 3.5.16-19 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client | xulrunner | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client | xulrunner-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client | xulrunner-devel | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-devel | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:10.0.8-1.el6_3 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:10.0.8-1.el5_8 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:10.0.8-1.el5_8 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2012-4186 Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla… Also affects iceape
- CVE-2012-0470 Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in… Also affects iceape
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects iceape
- CVE-2011-0073 Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does… Also affects iceape
- CVE-2011-0065 Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17… Also affects iceape
- CVE-2017-5404 A use-after-free error can occur when manipulating ranges in selections with one node… Also affects firefox
- CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Also affects firefox
- CVE-2016-9899 Use-after-free while manipulating DOM events and removing audio elements due to errors in… Also affects firefox