NVD

Id
42564  
Name
CVE-2012-0469  
Description
Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-04-25  
Modified Date
2013-11-02  
Seq
2012-0469  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214491 42564 CVE-2012-0469 oval:org.mitre.oval:def:16734  View
214492 42564 CVE-2012-0469 http://www.mozilla.org/security/announce/2012/mfsa2012-22.html  View
214493 42564 CVE-2012-0469 53220  View
214494 42564 CVE-2012-0469 https://bugzilla.mozilla.org/show_bug.cgi?id=738985  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26423 JVNDB-2012-002130 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品の mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace 関数には、IndexedDB データに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0469 53707 CVE-2012-0469 42564 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002130.html 2012-04-24 2012-07-23 View