NVD

Id
45444  
Name
CVE-2012-3966  
Description
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-29  
Modified Date
2013-11-02  
Seq
2012-3966  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228126 45444 CVE-2012-3966 openSUSE-SU-2012:1065  View
228127 45444 CVE-2012-3966 SUSE-SU-2012:1157  View
228128 45444 CVE-2012-3966 SUSE-SU-2012:1167  View
228129 45444 CVE-2012-3966 oval:org.mitre.oval:def:16246  View
228130 45444 CVE-2012-3966 RHSA-2012:1210  View
228131 45444 CVE-2012-3966 RHSA-2012:1211  View
228132 45444 CVE-2012-3966 http://www.mozilla.org/security/announce/2012/mfsa2012-61.html  View
228133 45444 CVE-2012-3966 USN-1548-1  View
228134 45444 CVE-2012-3966 USN-1548-2  View
228135 45444 CVE-2012-3966 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
228136 45444 CVE-2012-3966 https://bugzilla.mozilla.org/show_bug.cgi?id=775793  View
228137 45444 CVE-2012-3966 https://bugzilla.mozilla.org/show_bug.cgi?id=775794  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28246 JVNDB-2012-003953 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、下記項目に関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2012-3966 57204 CVE-2012-3966 45444 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003953.html 2012-08-28 2013-06-11 View