ByteOS Network

Source-cve@mitre.org

Published At-18 Jul, 2012 | 10:26

Updated At-29 Apr, 2026 | 01:13

The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	cve@mitre.org	N/A
http://osvdb.org/84010	cve@mitre.org	N/A
http://secunia.com/advisories/49965	cve@mitre.org	N/A
http://secunia.com/advisories/49968	cve@mitre.org	N/A
http://secunia.com/advisories/49972	cve@mitre.org	N/A
http://secunia.com/advisories/49993	cve@mitre.org	N/A
http://secunia.com/advisories/49994	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-50.html	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/54572	cve@mitre.org	N/A
http://www.securitytracker.com/id?1027256	cve@mitre.org	N/A
http://www.securitytracker.com/id?1027257	cve@mitre.org	N/A
http://www.securitytracker.com/id?1027258	cve@mitre.org	N/A
http://www.ubuntu.com/usn/USN-1509-1	cve@mitre.org	N/A
http://www.ubuntu.com/usn/USN-1509-2	cve@mitre.org	N/A
http://www.ubuntu.com/usn/USN-1510-1	cve@mitre.org	N/A
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=761014	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16735	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/84010	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49965	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49968	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49972	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49993	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49994	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-50.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/54572	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1027256	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1027257	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1027258	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1509-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1509-2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1510-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=761014	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16735	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History