ByteOS Network

Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html	cve@mitre.org	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1210.html	cve@mitre.org	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1211.html	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2012/dsa-2553	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2012/dsa-2554	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2012/dsa-2556	cve@mitre.org	Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-58.html	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/55317	cve@mitre.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1548-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1548-2	cve@mitre.org	Third Party Advisory
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf	cve@mitre.org	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=769303	cve@mitre.org	Issue Tracking Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1210.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1211.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2012/dsa-2553	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2012/dsa-2554	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2012/dsa-2556	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-58.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/55317	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1548-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1548-2	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=769303	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1210.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1211.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2553

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2554

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2556

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-58.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/55317

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-1548-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1548-2

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=769303

Source: cve@mitre.org

Resource:

Issue Tracking

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html