Vulnerabilities
Projects
About Us
Contact Us
WhiteSource Vulnerability Database
We found results for “”
CVE-2012-1962
Good to know:
Date: July 18, 2012
Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.
Severity Score
Severity Score
Weakness Type (CWE)
Resource Management Errors
CWE-399Top Fix
Upgrade Version
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | |
| Attack Complexity (AC): | |
| Privilegs Required (PR): | |
| User Interaction (UI): | |
| Scope (S): | |
| Confidentiality (C): | |
| Integrity (I): | |
| Availability (A): |
CVSS v2
| Base Score: |
|
|---|---|
| Access Vector (AV): | NETWORK |
| Access Complexity (AC): | LOW |
| Authentication (AU): | NONE |
| Confidentiality (C): | COMPLETE |
| Integrity (I): | COMPLETE |
| Availability (A): | COMPLETE |
| Additional information: |