Description
Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
Metrics
CVSS 2.0 9.3/10
AV:N/AC:M/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.htmlMailing List, Third Party Advisory
- http://osvdb.org/87608Broken Link
- http://rhn.redhat.com/errata/RHSA-2012-1482.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1483.htmlThird Party Advisory
- http://secunia.com/advisories/51359Third Party Advisory
- http://secunia.com/advisories/51360Third Party Advisory
- http://secunia.com/advisories/51369Third Party Advisory
- http://secunia.com/advisories/51370Third Party Advisory
- http://secunia.com/advisories/51381Third Party Advisory
- http://secunia.com/advisories/51434Third Party Advisory
- http://secunia.com/advisories/51439Third Party Advisory
- http://secunia.com/advisories/51440Third Party Advisory
- http://www.debian.org/security/2012/dsa-2583Third Party Advisory
- http://www.debian.org/security/2012/dsa-2584Third Party Advisory
- http://www.debian.org/security/2012/dsa-2588Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:173Third Party Advisory
- http://www.mozilla.org/security/announce/2012/mfsa2012-105.htmlNot Applicable
- http://www.mozilla.org/security/announce/2013/mfsa2013-02.htmlVendor Advisory
- http://www.securityfocus.com/bid/56636Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1636-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-3Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1681-4Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=792305Exploit, Issue Tracking, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80195Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16849Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.htmlMailing List, Third Party Advisory
- http://osvdb.org/87608Broken Link
- http://rhn.redhat.com/errata/RHSA-2012-1482.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1483.htmlThird Party Advisory
- http://secunia.com/advisories/51359Third Party Advisory
- http://secunia.com/advisories/51360Third Party Advisory
- http://secunia.com/advisories/51369Third Party Advisory
- http://secunia.com/advisories/51370Third Party Advisory
- http://secunia.com/advisories/51381Third Party Advisory
- http://secunia.com/advisories/51434Third Party Advisory
- http://secunia.com/advisories/51439Third Party Advisory
- http://secunia.com/advisories/51440Third Party Advisory
- http://www.debian.org/security/2012/dsa-2583Third Party Advisory
- http://www.debian.org/security/2012/dsa-2584Third Party Advisory
- http://www.debian.org/security/2012/dsa-2588Third Party Advisory
Timeline
- Published
- Nov 21, 2012
- Last modified
- Jun 16, 2026
- NVD status
- Modified