CVE - CVE-2012-5838

CVE-ID
CVE-2012-5838	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:56644 URL:http://www.securityfocus.com/bid/56644 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-106.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=802778 OSVDB:87599 URL:~~http://osvdb.org/87599~~ (Obsolete source) OVAL:oval:org.mitre.oval:def:16896 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16896 SECUNIA:51369 URL:http://secunia.com/advisories/51369 SECUNIA:51370 URL:http://secunia.com/advisories/51370 SECUNIA:51381 URL:http://secunia.com/advisories/51381 SECUNIA:51434 URL:http://secunia.com/advisories/51434 SECUNIA:51439 URL:http://secunia.com/advisories/51439 SECUNIA:51440 URL:http://secunia.com/advisories/51440 SUSE:SUSE-SU-2012:1592 URL:http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html SUSE:openSUSE-SU-2012:1583 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html SUSE:openSUSE-SU-2012:1585 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html SUSE:openSUSE-SU-2012:1586 URL:http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html SUSE:openSUSE-SU-2013:0175 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html UBUNTU:USN-1636-1 URL:http://www.ubuntu.com/usn/USN-1636-1 UBUNTU:USN-1638-1 URL:http://www.ubuntu.com/usn/USN-1638-1 UBUNTU:USN-1638-2 URL:http://www.ubuntu.com/usn/USN-1638-2 UBUNTU:USN-1638-3 URL:http://www.ubuntu.com/usn/USN-1638-3
Assigning CNA
MITRE Corporation
Date Record Created
20121105	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20121105)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)