NVD

Id
43812  
Name
CVE-2012-1954  
Description
Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-07-18  
Modified Date
2014-10-10  
Seq
2012-1954  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220071 43812 CVE-2012-1954 SUSE-SU-2012:0895  View
220072 43812 CVE-2012-1954 SUSE-SU-2012:0896  View
220073 43812 CVE-2012-1954 openSUSE-SU-2012:0899  View
220074 43812 CVE-2012-1954 openSUSE-SU-2012:0917  View
220075 43812 CVE-2012-1954 oval:org.mitre.oval:def:16984  View
220076 43812 CVE-2012-1954 RHSA-2012:1088  View
220077 43812 CVE-2012-1954 DSA-2514  View
220078 43812 CVE-2012-1954 DSA-2528  View
220079 43812 CVE-2012-1954 http://www.mozilla.org/security/announce/2012/mfsa2012-44.html  View
220080 43812 CVE-2012-1954 1027256  View
220081 43812 CVE-2012-1954 USN-1509-1  View
220082 43812 CVE-2012-1954 USN-1509-2  View
220083 43812 CVE-2012-1954 https://bugzilla.mozilla.org/show_bug.cgi?id=765139  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27418 JVNDB-2012-003125 複数の Mozilla 製品の nsDocument::AdoptNode 関数におけるサービス運用妨害 (DoS) の脆弱性 複数の Mozilla 製品の nsDocument::AdoptNode 関数には、サービス運用妨害 (ヒープメモリ破損) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-1954 55192 CVE-2012-1954 43812 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003125.html 2012-07-17 2012-12-14 View