CVE-2012-1970
HIGH severity · CVSS 10 · Memory corruption
10CVSS HIGH
Summary
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)6%
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products we track (2)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2012-1210.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2012-1211.htmlAdvisory
- http://www.debian.org/security/2012/dsa-2553Advisory
- http://www.debian.org/security/2012/dsa-2554Advisory
- http://www.debian.org/security/2012/dsa-2556Advisory