ByteOS Network

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	cve@mitre.org	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0387.html	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2012-0388.html	cve@mitre.org	N/A
http://secunia.com/advisories/48359	cve@mitre.org	N/A
http://secunia.com/advisories/48402	cve@mitre.org	N/A
http://secunia.com/advisories/48414	cve@mitre.org	N/A
http://secunia.com/advisories/48495	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48496	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48513	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48553	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48561	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48624	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48629	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/48823	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-14.html	cve@mitre.org	Third Party Advisory Vendor Advisory
http://www.securitytracker.com/id?1026801	cve@mitre.org	N/A
http://www.securitytracker.com/id?1026803	cve@mitre.org	N/A
http://www.securitytracker.com/id?1026804	cve@mitre.org	N/A
http://www.ubuntu.com/usn/USN-1400-1	cve@mitre.org	N/A
http://www.ubuntu.com/usn/USN-1400-2	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-3	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-4	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-5	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1401-1	cve@mitre.org	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=720103	cve@mitre.org	Issue Tracking Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0387.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2012-0388.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/48359	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/48402	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/48414	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/48495	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48496	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48513	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48553	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48561	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48624	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48629	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/48823	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-14.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory Vendor Advisory
http://www.securitytracker.com/id?1026801	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1026803	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1026804	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1400-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1400-2	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-3	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-4	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1400-5	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1401-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=720103	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-0387.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-0388.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/48359

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/48402

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/48414

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/48495

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48496

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48513

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48553

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48561

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48624

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48629

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/48823

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:031

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:032

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-14.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id?1026801

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1026803

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1026804

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-1400-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-1400-2

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1400-3

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1400-4

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1400-5

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1401-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=720103

Source: cve@mitre.org

Resource:

Issue Tracking

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html