NVD

Id
46866  
Name
CVE-2012-5833  
Description
The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via function calls involving certain values of the level parameter.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-5833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234627 46866 CVE-2012-5833 SUSE-SU-2012:1592  View
234628 46866 CVE-2012-5833 openSUSE-SU-2013:0175  View
234629 46866 CVE-2012-5833 openSUSE-SU-2012:1583  View
234630 46866 CVE-2012-5833 openSUSE-SU-2012:1585  View
234631 46866 CVE-2012-5833 openSUSE-SU-2012:1586  View
234632 46866 CVE-2012-5833 oval:org.mitre.oval:def:16748  View
234633 46866 CVE-2012-5833 RHSA-2012:1482  View
234634 46866 CVE-2012-5833 RHSA-2012:1483  View
234635 46866 CVE-2012-5833 MDVSA-2012:173  View
234636 46866 CVE-2012-5833 http://www.mozilla.org/security/announce/2012/mfsa2012-106.html  View
234637 46866 CVE-2012-5833 56642  View
234638 46866 CVE-2012-5833 USN-1636-1  View
234639 46866 CVE-2012-5833 USN-1638-1  View
234640 46866 CVE-2012-5833 USN-1638-2  View
234641 46866 CVE-2012-5833 USN-1638-3  View
234642 46866 CVE-2012-5833 firefox-teximage2d-calls-code-exec(80184)  View
234643 46866 CVE-2012-5833 https://bugzilla.mozilla.org/show_bug.cgi?id=785734  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29762 JVNDB-2012-005469 複数の Mozilla 製品の WebGL サブシステムにおける任意のコードを実行される脆弱性 複数の Mozilla 製品の WebGL サブシステム内の texImage2D の実装は、Mesa ドライバと適切に対話処理しないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-5833 59071 CVE-2012-5833 46866 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005469.html 2012-11-20 2016-02-16 View