NVD

Id
42572  
Name
CVE-2012-0478  
Description
The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-04-25  
Modified Date
2013-11-02  
Seq
2012-0478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214524 42572 CVE-2012-0478 oval:org.mitre.oval:def:16893  View
214525 42572 CVE-2012-0478 http://www.mozilla.org/security/announce/2012/mfsa2012-30.html  View
214526 42572 CVE-2012-0478 53227  View
214527 42572 CVE-2012-0478 firefox-teximage2d-dos(75155)  View
214528 42572 CVE-2012-0478 https://bugzilla.mozilla.org/show_bug.cgi?id=727547  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26431 JVNDB-2012-002138 複数の Mozilla 製品の texImage2D の実装における任意のコードを実行される脆弱性 複数の Mozilla 製品の WebGL サブシステム内の texImage2D の実装は、JSVAL_TO_OBJECT キャストを適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0478 53716 CVE-2012-0478 42572 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002138.html 2012-04-24 2012-07-23 View