CyberSec.Space Logo
CVEブラウザに戻る

CVE-2012-0444

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0500%
EPSS Percentile7.44th
Published2012年2月1日
Last Modified2026年4月29日

Vulnerability Description

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

Affected Platforms (CPE)

📦
Mozilla

Firefox

< 3.6.26
📦
Mozilla

Firefox

>= 4.0 and < 10.0
📦
Mozilla

Seamonkey

< 2.7
📦
Mozilla

Thunderbird

< 3.1.18
📦
Mozilla

Thunderbird

>= 5.0 and < 10.0
💻
Debian

Debian Linux

= 5.0
💻
Debian

Debian Linux

= 6.0
💻
Opensuse

Opensuse

= 11.4
💻
Suse

Linux Enterprise Desktop

= 10
💻
Suse

Linux Enterprise Desktop

= 11
💻
Suse

Linux Enterprise Server

= 10
💻
Suse

Linux Enterprise Server

= 11
💻
Suse

Linux Enterprise Server

= 11
💻
Suse

Linux Enterprise Software Development Kit

= 10
💻
Suse

Linux Enterprise Software Development Kit

= 11
💻
Canonical

Ubuntu Linux

= 10.04
💻
Canonical

Ubuntu Linux

= 10.10
💻
Canonical

Ubuntu Linux

= 11.04
💻
Canonical

Ubuntu Linux

= 11.10

References & Advisories

関連する脆弱性情報