CVE

Id
55197  
CVE No.
CVE-2012-1954  
Status
Candidate  
Description
Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.  
Phase
Assigned (20120330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
576807 55197 CVE-2012-1954 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-44.html  View
576808 55197 CVE-2012-1954 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=765139  View
576809 55197 CVE-2012-1954 DEBIAN:DSA-2528  View
576810 55197 CVE-2012-1954 URL:http://www.debian.org/security/2012/dsa-2528  View
576811 55197 CVE-2012-1954 DEBIAN:DSA-2514  View
576812 55197 CVE-2012-1954 URL:http://www.debian.org/security/2012/dsa-2514  View
576813 55197 CVE-2012-1954 REDHAT:RHSA-2012:1088  View
576814 55197 CVE-2012-1954 URL:http://rhn.redhat.com/errata/RHSA-2012-1088.html  View
576815 55197 CVE-2012-1954 SUSE:openSUSE-SU-2012:0899  View
576816 55197 CVE-2012-1954 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html  View
576817 55197 CVE-2012-1954 SUSE:openSUSE-SU-2012:0917  View
576818 55197 CVE-2012-1954 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html  View
576819 55197 CVE-2012-1954 SUSE:SUSE-SU-2012:0895  View
576820 55197 CVE-2012-1954 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html  View
576821 55197 CVE-2012-1954 SUSE:SUSE-SU-2012:0896  View
576822 55197 CVE-2012-1954 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html  View
576823 55197 CVE-2012-1954 UBUNTU:USN-1509-1  View
576824 55197 CVE-2012-1954 URL:http://www.ubuntu.com/usn/USN-1509-1  View
576825 55197 CVE-2012-1954 UBUNTU:USN-1509-2  View
576826 55197 CVE-2012-1954 URL:http://www.ubuntu.com/usn/USN-1509-2  View
576827 55197 CVE-2012-1954 OVAL:oval:org.mitre.oval:def:16984  View
576828 55197 CVE-2012-1954 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16984  View
576829 55197 CVE-2012-1954 SECTRACK:1027256  View
576830 55197 CVE-2012-1954 URL:http://www.securitytracker.com/id?1027256  View
576831 55197 CVE-2012-1954 SECUNIA:49965  View
576832 55197 CVE-2012-1954 URL:http://secunia.com/advisories/49965  View
576833 55197 CVE-2012-1954 SECUNIA:49972  View
576834 55197 CVE-2012-1954 URL:http://secunia.com/advisories/49972  View
576835 55197 CVE-2012-1954 SECUNIA:49992  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27423 JVNDB-2012-003130 複数の Mozilla 製品における XBL へのアクセス制限を回避される脆弱性 複数の Mozilla 製品は、オブジェクトがクロスコンパートメントとしてラップされている場合、同一コンパートメントのセキュリティラッパー (SCSW) を配慮しないため、XBL へのアクセス制限を回避される脆弱性が存在します。 CVE-2012-1959 55197 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003130.html  View