NVD

Id
43818  
Name
CVE-2012-1960  
Description
The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-07-18  
Modified Date
2014-10-10  
Seq
2012-1960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220139 43818 CVE-2012-1960 SUSE-SU-2012:0895  View
220140 43818 CVE-2012-1960 SUSE-SU-2012:0896  View
220141 43818 CVE-2012-1960 openSUSE-SU-2012:0899  View
220142 43818 CVE-2012-1960 openSUSE-SU-2012:0917  View
220143 43818 CVE-2012-1960 oval:org.mitre.oval:def:16735  View
220144 43818 CVE-2012-1960 http://www.mozilla.org/security/announce/2012/mfsa2012-50.html  View
220145 43818 CVE-2012-1960 1027256  View
220146 43818 CVE-2012-1960 USN-1509-1  View
220147 43818 CVE-2012-1960 USN-1509-2  View
220148 43818 CVE-2012-1960 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
220149 43818 CVE-2012-1960 https://bugzilla.mozilla.org/show_bug.cgi?id=761014  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27424 JVNDB-2012-003131 複数の Mozilla 製品の QCMS の実装におけるプロセスメモリから重要な情報を取得される脆弱性 複数の Mozilla 製品で QCMS を実装している qcms_transform_data_rgb_out_lut_sse2 関数には、プロセスメモリから重要な情報を取得される脆弱性が存在します。 CVE-2012-1960 55198 CVE-2012-1960 43818 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003131.html 2012-07-17 2013-06-07 View