CVE

Id
53712  
CVE No.
CVE-2012-0469  
Status
Candidate  
Description
Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.  
Phase
Assigned (20120109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
566011 53712 CVE-2012-0469 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-22.html  View
566012 53712 CVE-2012-0469 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=738985  View
566013 53712 CVE-2012-0469 BID:53220  View
566014 53712 CVE-2012-0469 URL:http://www.securityfocus.com/bid/53220  View
566015 53712 CVE-2012-0469 OVAL:oval:org.mitre.oval:def:16734  View
566016 53712 CVE-2012-0469 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16734  View
566017 53712 CVE-2012-0469 SECUNIA:48972  View
566018 53712 CVE-2012-0469 URL:http://secunia.com/advisories/48972  View
566019 53712 CVE-2012-0469 SECUNIA:49047  View
566020 53712 CVE-2012-0469 URL:http://secunia.com/advisories/49047  View
566021 53712 CVE-2012-0469 SECUNIA:49055  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26428 JVNDB-2012-002135 複数の Mozilla 製品の docshell の実装におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品の docshell の実装には、短絡化 (short-circuited) されたページ読み込みに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0474 53712 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002135.html  View