CVE

Id
53707  
CVE No.
CVE-2012-0464  
Status
Candidate  
Description
Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.  
Phase
Assigned (20120109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
565913 53707 CVE-2012-0464 MISC:http://pwn2own.zerodayinitiative.com/status.html  View
565914 53707 CVE-2012-0464 MISC:http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757  View
565915 53707 CVE-2012-0464 MISC:http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663  View
565916 53707 CVE-2012-0464 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-19.html  View
565917 53707 CVE-2012-0464 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=720079  View
565918 53707 CVE-2012-0464 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=735104  View
565919 53707 CVE-2012-0464 SUSE:openSUSE-SU-2012:0417  View
565920 53707 CVE-2012-0464 URL:http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html  View
565921 53707 CVE-2012-0464 UBUNTU:USN-1400-3  View
565922 53707 CVE-2012-0464 URL:http://www.ubuntu.com/usn/USN-1400-3  View
565923 53707 CVE-2012-0464 UBUNTU:USN-1400-4  View
565924 53707 CVE-2012-0464 URL:http://www.ubuntu.com/usn/USN-1400-4  View
565925 53707 CVE-2012-0464 UBUNTU:USN-1400-5  View
565926 53707 CVE-2012-0464 URL:http://www.ubuntu.com/usn/USN-1400-5  View
565927 53707 CVE-2012-0464 UBUNTU:USN-1400-2  View
565928 53707 CVE-2012-0464 URL:http://www.ubuntu.com/usn/USN-1400-2  View
565929 53707 CVE-2012-0464 UBUNTU:USN-1401-1  View
565930 53707 CVE-2012-0464 URL:http://www.ubuntu.com/usn/USN-1401-1  View
565931 53707 CVE-2012-0464 OVAL:oval:org.mitre.oval:def:14170  View
565932 53707 CVE-2012-0464 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14170  View
565933 53707 CVE-2012-0464 SECUNIA:48629  View
565934 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48629  View
565935 53707 CVE-2012-0464 SECUNIA:48513  View
565936 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48513  View
565937 53707 CVE-2012-0464 SECUNIA:48495  View
565938 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48495  View
565939 53707 CVE-2012-0464 SECUNIA:48496  View
565940 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48496  View
565941 53707 CVE-2012-0464 SECUNIA:48553  View
565942 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48553  View
565943 53707 CVE-2012-0464 SECUNIA:48561  View
565944 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48561  View
565945 53707 CVE-2012-0464 SECUNIA:48624  View
565946 53707 CVE-2012-0464 URL:http://secunia.com/advisories/48624  View
565947 53707 CVE-2012-0464 SECUNIA:48823  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26423 JVNDB-2012-002130 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品の mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace 関数には、IndexedDB データに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0469 53707 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002130.html  View