ByteOS Network

Vulnerability Details :

CVE-2012-4188

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-10 Oct, 2012 | 17:00

Updated At-06 Aug, 2024 | 20:28

Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:10 Oct, 2012 | 17:00

Updated At:06 Aug, 2024 | 20:28

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/50904	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/50856	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2565	vendor-advisory x_refsource_DEBIAN
http://secunia.com/advisories/50892	third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2572	vendor-advisory x_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory x_refsource_REDHAT
http://secunia.com/advisories/50936	third-party-advisory x_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	x_refsource_CONFIRM
http://secunia.com/advisories/51181	third-party-advisory x_refsource_SECUNIA
http://osvdb.org/86096	vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/55318	third-party-advisory x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory x_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory x_refsource_MANDRIVA
https://bugzilla.mozilla.org/show_bug.cgi?id=787722	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964	vdb-entry signature x_refsource_OVAL
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory x_refsource_UBUNTU
http://www.debian.org/security/2012/dsa-2569	vendor-advisory x_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilities/79165	vdb-entry x_refsource_XF

Hyperlink: http://secunia.com/advisories/50904

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/50984

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/50935

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/50856

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2012/dsa-2565

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://secunia.com/advisories/50892

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.debian.org/security/2012/dsa-2572

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1351.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://secunia.com/advisories/50936

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-86.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/51181

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://osvdb.org/86096

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://secunia.com/advisories/55318

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:163

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=787722

Resource:

x_refsource_CONFIRM

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.ubuntu.com/usn/USN-1611-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.debian.org/security/2012/dsa-2569

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/79165

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/50904	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/50984	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/50935	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/50856	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2012/dsa-2565	vendor-advisory x_refsource_DEBIAN x_transferred
http://secunia.com/advisories/50892	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.debian.org/security/2012/dsa-2572	vendor-advisory x_refsource_DEBIAN x_transferred
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory x_refsource_REDHAT x_transferred
http://secunia.com/advisories/50936	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/51181	third-party-advisory x_refsource_SECUNIA x_transferred
http://osvdb.org/86096	vdb-entry x_refsource_OSVDB x_transferred
http://secunia.com/advisories/55318	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory x_refsource_MANDRIVA x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=787722	x_refsource_CONFIRM x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964	vdb-entry signature x_refsource_OVAL x_transferred
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.debian.org/security/2012/dsa-2569	vendor-advisory x_refsource_DEBIAN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/79165	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://secunia.com/advisories/50904

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/50984

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/50935

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/50856

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.debian.org/security/2012/dsa-2565

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://secunia.com/advisories/50892

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.debian.org/security/2012/dsa-2572

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1351.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://secunia.com/advisories/50936

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-86.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/51181

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://osvdb.org/86096

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://secunia.com/advisories/55318

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:163

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=787722

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1611-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.debian.org/security/2012/dsa-2569

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/79165

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:10 Oct, 2012 | 17:55

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Mozilla Corporation

>>firefox>>Versions before 10.0.8(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird_esr>>Versions before 10.0.8(exclusive)

cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>Versions before 16.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 16.0(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>Versions before 2.13(exclusive)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

Canonical Ltd.

>>ubuntu_linux>>11.04

cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>11.10

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>5.0

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>6.3

cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>5.0

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>5.0

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>6.0

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>10

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>11

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

SUSE

>>linux_enterprise_sdk>>10

cpe:2.3:o:suse:linux_enterprise_sdk:10:sp4:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>10

cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	cve@mitre.org	Mailing List Third Party Advisory
http://osvdb.org/86096	cve@mitre.org	Broken Link
http://rhn.redhat.com/errata/RHSA-2012-1351.html	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/50856	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/50892	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/50904	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/50935	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/50936	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/50984	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51181	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/55318	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2012/dsa-2565	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2012/dsa-2569	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2012/dsa-2572	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	cve@mitre.org	Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	cve@mitre.org	Vendor Advisory
http://www.ubuntu.com/usn/USN-1611-1	cve@mitre.org	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=787722	cve@mitre.org	Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/79165	cve@mitre.org	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://osvdb.org/86096	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://rhn.redhat.com/errata/RHSA-2012-1351.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/50856	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/50892	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/50904	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/50935	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/50936	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/50984	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51181	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/55318	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2012/dsa-2565	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2012/dsa-2569	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2012/dsa-2572	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.ubuntu.com/usn/USN-1611-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=787722	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/79165	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://osvdb.org/86096

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1351.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/50856

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/50892

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/50904

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/50935

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/50936

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/50984

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51181

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/55318

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2565

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2569

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2572

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:163

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-86.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1611-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=787722

Source: cve@mitre.org

Resource:

Issue Tracking

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/79165

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html