CVE-2012-4202
NoneCVSS
—
EPSS
11.1%
Published
Nov 21, 2012
CISA due date
—
The record
Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via a crafted GIF image.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client | thunderbird | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client | thunderbird-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client | xulrunner | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client | xulrunner-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client | xulrunner-devel | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-devel | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:10.0.11-1.el6_3 |
| Red Hat:rhel_productivity:5 | thunderbird | 0 | 0:10.0.11-1.el5_8 |
| Red Hat:rhel_productivity:5 | thunderbird-debuginfo | 0 | 0:10.0.11-1.el5_8 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2017-5404 A use-after-free error can occur when manipulating ranges in selections with one node… Also affects firefox
- CVE-2017-5398 Memory safety bugs were reported in Thunderbird 45.7. Also affects firefox
- CVE-2016-9899 Use-after-free while manipulating DOM events and removing audio elements due to errors in… Also affects firefox
- CVE-2017-5375 JIT code allocation can allow for a bypass of ASLR and DEP protections leading to… Also affects firefox
- CVE-2017-5373 Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Also affects firefox
- CVE-2016-9893 Memory safety bugs were reported in Thunderbird 45.5. Also affects firefox
- CVE-2016-9066 A buffer overflow resulting in a potentially exploitable crash due to memory allocation… Also affects firefox
- CVE-2016-9079 A use-after-free vulnerability in SVG Animation has been discovered. Also affects firefox