CVE - CVE-2012-5838

CVE-ID
CVE-2012-5838	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-106.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=802778 SUSE:openSUSE-SU-2012:1583 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html SUSE:openSUSE-SU-2012:1585 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html SUSE:openSUSE-SU-2012:1586 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html SUSE:SUSE-SU-2012:1592 URL:http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html SUSE:openSUSE-SU-2013:0175 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html UBUNTU:USN-1638-1 URL:http://www.ubuntu.com/usn/USN-1638-1 UBUNTU:USN-1638-3 URL:http://www.ubuntu.com/usn/USN-1638-3 UBUNTU:USN-1638-2 URL:http://www.ubuntu.com/usn/USN-1638-2 UBUNTU:USN-1636-1 URL:http://www.ubuntu.com/usn/USN-1636-1 BID:56644 URL:http://www.securityfocus.com/bid/56644 OSVDB:87599 URL:http://osvdb.org/87599 OVAL:oval:org.mitre.oval:def:16896 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16896 SECUNIA:51369 URL:http://secunia.com/advisories/51369 SECUNIA:51381 URL:http://secunia.com/advisories/51381 SECUNIA:51434 URL:http://secunia.com/advisories/51434 SECUNIA:51439 URL:http://secunia.com/advisories/51439 SECUNIA:51440 URL:http://secunia.com/advisories/51440 SECUNIA:51370 URL:http://secunia.com/advisories/51370
Assigning CNA
N/A
Date Entry Created
20121105	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20121105)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org