NVD

Id
42558  
Name
CVE-2012-0463  
Description
The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-03-14  
Modified Date
2012-10-30  
Seq
2012-0463  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214434 42558 CVE-2012-0463 openSUSE-SU-2012:0417  View
214435 42558 CVE-2012-0463 oval:org.mitre.oval:def:15143  View
214436 42558 CVE-2012-0463 http://www.mozilla.org/security/announce/2012/mfsa2012-19.html  View
214437 42558 CVE-2012-0463 52466  View
214438 42558 CVE-2012-0463 https://bugzilla.mozilla.org/show_bug.cgi?id=688208  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26081 JVNDB-2012-001788 複数の Mozilla 製品のブラウザエンジンの nsWindow 実装におけるサービス運用妨害 (DoS) の脆弱性 複数の Mozilla 製品のブラウザエンジンの nsWindow の実装は、イベントディスパッチスレッドの後にインスタンスの有効性をチェックしないため、サービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-0463 53701 CVE-2012-0463 42558 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001788.html 2012-03-13 2012-07-30 View