CVE

Id
55194  
CVE No.
CVE-2012-1951  
Status
Candidate  
Description
Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.  
Phase
Assigned (20120330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
576732 55194 CVE-2012-1951 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-44.html  View
576733 55194 CVE-2012-1951 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=752902  View
576734 55194 CVE-2012-1951 REDHAT:RHSA-2012:1088  View
576735 55194 CVE-2012-1951 URL:http://rhn.redhat.com/errata/RHSA-2012-1088.html  View
576736 55194 CVE-2012-1951 SUSE:openSUSE-SU-2012:0899  View
576737 55194 CVE-2012-1951 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html  View
576738 55194 CVE-2012-1951 SUSE:openSUSE-SU-2012:0917  View
576739 55194 CVE-2012-1951 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html  View
576740 55194 CVE-2012-1951 SUSE:SUSE-SU-2012:0895  View
576741 55194 CVE-2012-1951 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html  View
576742 55194 CVE-2012-1951 SUSE:SUSE-SU-2012:0896  View
576743 55194 CVE-2012-1951 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html  View
576744 55194 CVE-2012-1951 UBUNTU:USN-1509-1  View
576745 55194 CVE-2012-1951 URL:http://www.ubuntu.com/usn/USN-1509-1  View
576746 55194 CVE-2012-1951 UBUNTU:USN-1509-2  View
576747 55194 CVE-2012-1951 URL:http://www.ubuntu.com/usn/USN-1509-2  View
576748 55194 CVE-2012-1951 OVAL:oval:org.mitre.oval:def:16077  View
576749 55194 CVE-2012-1951 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16077  View
576750 55194 CVE-2012-1951 SECTRACK:1027256  View
576751 55194 CVE-2012-1951 URL:http://www.securitytracker.com/id?1027256  View
576752 55194 CVE-2012-1951 SECUNIA:49965  View
576753 55194 CVE-2012-1951 URL:http://secunia.com/advisories/49965  View
576754 55194 CVE-2012-1951 SECUNIA:49972  View
576755 55194 CVE-2012-1951 URL:http://secunia.com/advisories/49972  View
576756 55194 CVE-2012-1951 SECUNIA:49992  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28228 JVNDB-2012-003935 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品は、location オブジェクト (window.location) にシャドウを適用するための Object.defineProperty メソッドの使用を適切に制限しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2012-1956 55194 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003935.html  View