CVE

Id
53697  
CVE No.
CVE-2012-0454  
Status
Candidate  
Description
Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library.  
Phase
Assigned (20120109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
565634 53697 CVE-2012-0454 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-12.html  View
565635 53697 CVE-2012-0454 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=684555  View
565636 53697 CVE-2012-0454 OVAL:oval:org.mitre.oval:def:14258  View
565637 53697 CVE-2012-0454 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14258  View
565638 53697 CVE-2012-0454 SECUNIA:48629  View
565639 53697 CVE-2012-0454 URL:http://secunia.com/advisories/48629  View
565640 53697 CVE-2012-0454 SECUNIA:48561  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26083 JVNDB-2012-001790 複数の Mozilla 製品 の Cascading Style Sheets 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 複数の Mozilla 製品 の Cascading Style Sheets (CSS) 実装には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-0459 53697 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001790.html  View