CVE

Id
53695  
CVE No.
CVE-2012-0452  
Status
Candidate  
Description
Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector"s access to a hash table containing a stale XBL binding.  
Phase
Assigned (20120109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
565616 53695 CVE-2012-0452 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-10.html  View
565617 53695 CVE-2012-0452 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=724284  View
565618 53695 CVE-2012-0452 MANDRIVA:MDVSA-2012:017  View
565619 53695 CVE-2012-0452 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:017  View
565620 53695 CVE-2012-0452 MANDRIVA:MDVSA-2012:018  View
565621 53695 CVE-2012-0452 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:018  View
565622 53695 CVE-2012-0452 SUSE:SUSE-SU-2012:0261  View
565623 53695 CVE-2012-0452 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00013.html  View
565624 53695 CVE-2012-0452 SUSE:openSUSE-SU-2012:0258  View
565625 53695 CVE-2012-0452 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00012.html  View
565626 53695 CVE-2012-0452 UBUNTU:USN-1360-1  View
565627 53695 CVE-2012-0452 URL:http://www.ubuntu.com/usn/USN-1360-1  View
565628 53695 CVE-2012-0452 BID:51975  View
565629 53695 CVE-2012-0452 URL:http://www.securityfocus.com/bid/51975  View
565630 53695 CVE-2012-0452 OVAL:oval:org.mitre.oval:def:15017  View
565631 53695 CVE-2012-0452 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15017  View
565632 53695 CVE-2012-0452 SECUNIA:49055  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26076 JVNDB-2012-001783 複数の Mozilla 製品の nsSMILTimeValueSpec::ConvertBetweenTimeContainer 関数における任意のコードを実行される脆弱性 複数の Mozilla 製品の nsSMILTimeValueSpec::ConvertBetweenTimeContainer 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2012-0457 53695 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001783.html  View