CVE

Id
55189  
CVE No.
CVE-2012-1946  
Status
Candidate  
Description
Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.  
Phase
Assigned (20120330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
576617 55189 CVE-2012-1946 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-38.html  View
576618 55189 CVE-2012-1946 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=750109  View
576619 55189 CVE-2012-1946 OVAL:oval:org.mitre.oval:def:17010  View
576620 55189 CVE-2012-1946 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:17010  View
576621 55189 CVE-2012-1946 SECUNIA:49981  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27415 JVNDB-2012-003122 複数の Mozilla 製品の nsSMILTimeValueSpec::IsEventBased 関数におけるサービス運用妨害 (DoS) の脆弱性 複数の Mozilla 製品の nsSMILTimeValueSpec::IsEventBased 関数には、サービス運用妨害 (ヒープメモリ破損) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-1951 55189 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003122.html  View