CVE-2012-1941

Scores

EPSS

0.000none0.0%
0%20%40%60%80%100%

Percentile: 0.0%

CVSS

9.3critical2.0
0246810

CVSS Score: 9.3/10

All CVSS Scores

CVSS 2.0
9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code by resizing a window displaying absolutely positioned and relatively positioned elements in nested columns.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdubuntu

CWEs

CWE-119

Vulnerable Software (12)

Type: Configuration

Product: firefox

Operating System: ubuntu hardy 8.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: icedove

Operating System: debian

Trait:
{  "fixed": "10.0.5-1"}

Source: debian

Type: Configuration

Product: icedove

Operating System: debian squeeze 6

Trait:
{  "unaffected": true}

Source: debian

Type: Configuration

Product: iceweasel

Operating System: debian

Trait:
{  "fixed": "10.0.5esr-1"}

Source: debian

Type: Configuration

Product: iceweasel

Operating System: debian squeeze 6

Trait:
{  "unaffected": true}

Source: debian

Type: Configuration

Product: seamonkey

Operating System: ubuntu hardy 8.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: thunderbird

Operating System: ubuntu hardy 8.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: xulrunner-1.9.2

Operating System: ubuntu hardy 8.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Vendor: mozilla

Product: firefox

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*",   ...

Source: nvd

Type: Configuration

Vendor: mozilla

Product: seamonkey

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*",   ...

Source: nvd