NVD

Id
42567  
Name
CVE-2012-0472  
Description
The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-04-25  
Modified Date
2013-11-02  
Seq
2012-0472  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214503 42567 CVE-2012-0472 oval:org.mitre.oval:def:17067  View
214504 42567 CVE-2012-0472 http://www.mozilla.org/security/announce/2012/mfsa2012-25.html  View
214505 42567 CVE-2012-0472 53218  View
214506 42567 CVE-2012-0472 https://bugzilla.mozilla.org/show_bug.cgi?id=744480  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26426 JVNDB-2012-002133 複数の Mozilla 製品の cairo-dwrite 実装におけるサービス運用妨害 (メモリ破損) の脆弱性 複数の Mozilla 製品の cairo-dwrite の実装は、Windows Vista および Windows 7 で使用される場合、フォントレンダリングの試行を適切に制限しないため、サービス運用妨害 (メモリ破損) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-0472 53710 CVE-2012-0472 42567 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002133.html 2012-04-24 2012-04-26 View