NVD

Id
45448  
Name
CVE-2012-3970  
Description
Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-29  
Modified Date
2013-11-02  
Seq
2012-3970  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228176 45448 CVE-2012-3970 openSUSE-SU-2012:1065  View
228177 45448 CVE-2012-3970 SUSE-SU-2012:1157  View
228178 45448 CVE-2012-3970 SUSE-SU-2012:1167  View
228179 45448 CVE-2012-3970 oval:org.mitre.oval:def:16876  View
228180 45448 CVE-2012-3970 RHSA-2012:1210  View
228181 45448 CVE-2012-3970 RHSA-2012:1211  View
228182 45448 CVE-2012-3970 http://www.mozilla.org/security/announce/2012/mfsa2012-63.html  View
228183 45448 CVE-2012-3970 55278  View
228184 45448 CVE-2012-3970 USN-1548-1  View
228185 45448 CVE-2012-3970 USN-1548-2  View
228186 45448 CVE-2012-3970 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
228187 45448 CVE-2012-3970 https://bugzilla.mozilla.org/show_bug.cgi?id=760996  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28250 JVNDB-2012-003957 複数の Mozilla 製品の nsTArray_base::Length 関数における任意のコードを実行される脆弱性 複数の Mozilla 製品の nsTArray_base::Length 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリの破損) 状態となる脆弱性が存在します。 CVE-2012-3970 57208 CVE-2012-3970 45448 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003957.html 2012-08-28 2013-06-11 View