NVD

Id
45468  
Name
CVE-2012-3990  
Description
Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-11-02  
Seq
2012-3990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228343 45468 CVE-2012-3990 SUSE-SU-2012:1351  View
228344 45468 CVE-2012-3990 oval:org.mitre.oval:def:16642  View
228345 45468 CVE-2012-3990 RHSA-2012:1351  View
228346 45468 CVE-2012-3990 DSA-2565  View
228347 45468 CVE-2012-3990 DSA-2569  View
228348 45468 CVE-2012-3990 DSA-2572  View
228349 45468 CVE-2012-3990 MDVSA-2012:163  View
228350 45468 CVE-2012-3990 http://www.mozilla.org/security/announce/2012/mfsa2012-87.html  View
228351 45468 CVE-2012-3990 USN-1611-1  View
228352 45468 CVE-2012-3990 firefox-nsicontent-code-exec(79172)  View
228353 45468 CVE-2012-3990 https://bugzilla.mozilla.org/show_bug.cgi?id=787704  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29202 JVNDB-2012-004909 複数の Mozilla 製品の IME State Manager の実装における任意のコードを実行される脆弱性 複数の Mozilla 製品の IME State Manager の実装には、nsIContent::GetNameSpaceID 関数に関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2012-3990 57228 CVE-2012-3990 45468 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004909.html 2012-10-09 2013-10-24 View