CVE - CVE-2012-0456

CVE-ID
CVE-2012-0456	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-14.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=711653 DEBIAN:DSA-2433 URL:http://www.debian.org/security/2012/dsa-2433 SUSE:openSUSE-SU-2012:0417 URL:http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html UBUNTU:USN-1400-3 URL:http://www.ubuntu.com/usn/USN-1400-3 UBUNTU:USN-1400-4 URL:http://www.ubuntu.com/usn/USN-1400-4 UBUNTU:USN-1400-5 URL:http://www.ubuntu.com/usn/USN-1400-5 UBUNTU:USN-1400-2 URL:http://www.ubuntu.com/usn/USN-1400-2 UBUNTU:USN-1401-1 URL:http://www.ubuntu.com/usn/USN-1401-1 OVAL:oval:org.mitre.oval:def:15007 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15007 SECUNIA:48629 URL:http://secunia.com/advisories/48629 SECUNIA:48513 URL:http://secunia.com/advisories/48513 SECUNIA:48495 URL:http://secunia.com/advisories/48495 SECUNIA:48496 URL:http://secunia.com/advisories/48496 SECUNIA:48553 URL:http://secunia.com/advisories/48553 SECUNIA:48561 URL:http://secunia.com/advisories/48561 SECUNIA:48624 URL:http://secunia.com/advisories/48624 SECUNIA:48823 URL:http://secunia.com/advisories/48823 SECUNIA:48920 URL:http://secunia.com/advisories/48920
Date Entry Created
20120109	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120109)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2012-0456