NVD

Id
45447  
Name
CVE-2012-3969  
Description
Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-29  
Modified Date
2013-11-02  
Seq
2012-3969  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228161 45447 CVE-2012-3969 openSUSE-SU-2012:1065  View
228162 45447 CVE-2012-3969 SUSE-SU-2012:1157  View
228163 45447 CVE-2012-3969 SUSE-SU-2012:1167  View
228164 45447 CVE-2012-3969 oval:org.mitre.oval:def:16635  View
228165 45447 CVE-2012-3969 RHSA-2012:1210  View
228166 45447 CVE-2012-3969 RHSA-2012:1211  View
228167 45447 CVE-2012-3969 DSA-2553  View
228168 45447 CVE-2012-3969 DSA-2554  View
228169 45447 CVE-2012-3969 DSA-2556  View
228170 45447 CVE-2012-3969 http://www.mozilla.org/security/announce/2012/mfsa2012-63.html  View
228171 45447 CVE-2012-3969 55292  View
228172 45447 CVE-2012-3969 USN-1548-1  View
228173 45447 CVE-2012-3969 USN-1548-2  View
228174 45447 CVE-2012-3969 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
228175 45447 CVE-2012-3969 https://bugzilla.mozilla.org/show_bug.cgi?id=782141  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28249 JVNDB-2012-003956 複数の Mozilla 製品の nsSVGFEMorphologyElement::Filter 関数における整数オーバーフローの脆弱性 複数の Mozilla 製品の nsSVGFEMorphologyElement::Filter 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2012-3969 57207 CVE-2012-3969 45447 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003956.html 2012-08-28 2013-06-11 View