Skip to content
OpenAdvisories
Unscored CVE-2012-0468 EUVD-2012-0500GHSA-gj4g-fgvc-6grf

The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to c…

Published Apr 25, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 firefox +3 10.0.4-1.el6_2 RHSA-2012:0516, RHSA-2012:0515
RHEL 5 firefox +3 10.0.4-1.el5_8 RHSA-2012:0516, RHSA-2012:0515
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Productivity 5 thunderbird 10.0.4-1.el5_8 RHSA-2012:0516

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 50.1.0-1.1 openSUSE-SU-2024:10071-1
openSUSE Tumbleweed MozillaThunderbird 45.5.1-1.1 openSUSE-SU-2024:10230-1

Advisories 4

References