ByteOS Network

NVD Vulnerability Details :

CVE-2012-4214

Modified

Source-cve@mitre.org

Published At-21 Nov, 2012 | 12:55

Updated At-29 Apr, 2026 | 01:13

Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-5840.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Mozilla Corporation

>>firefox>>Versions before 17.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>Versions from 10.0(inclusive) to 10.0.11(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>Versions before 2.14(exclusive)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 17.0(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird_esr>>Versions from 10.0(inclusive) to 10.0.11(exclusive)

cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.4

cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

openSUSE

>>opensuse>>12.1

cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>12.2

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>10

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>11

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>10

cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*

SUSE

>>linux_enterprise_software_development_kit>>10

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*

SUSE

>>linux_enterprise_software_development_kit>>11

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>5.0

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>6.3

cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>5.0

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>5.0

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

Canonical Ltd.

>>ubuntu_linux>>11.10

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html	cve@mitre.org	Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1482.html	cve@mitre.org	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1483.html	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51359	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51360	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51369	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51370	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51381	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51434	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51439	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/51440	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:173	cve@mitre.org	Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-105.html	cve@mitre.org	Vendor Advisory
http://www.palemoon.org/releasenotes-ng.shtml	cve@mitre.org	Broken Link
http://www.securityfocus.com/bid/56628	cve@mitre.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1636-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1638-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1638-2	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-1638-3	cve@mitre.org	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=795804	cve@mitre.org	Exploit Issue Tracking Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80187	cve@mitre.org	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16884	cve@mitre.org	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1482.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1483.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51359	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51360	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51369	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51370	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51381	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51434	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51439	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/51440	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:173	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-105.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.palemoon.org/releasenotes-ng.shtml	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/bid/56628	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1636-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1638-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1638-2	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-1638-3	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=795804	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80187	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16884	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1482.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1483.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51359

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51360

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51369

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51370

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51381

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51434

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51439

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51440

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:173

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-105.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.palemoon.org/releasenotes-ng.shtml

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/56628

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-1636-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1638-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1638-2

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1638-3

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=795804

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/80187

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16884

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1482.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-1483.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51359

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51360

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51369

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51370

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51381

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51434

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51439

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/51440

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:173

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-105.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.palemoon.org/releasenotes-ng.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/56628

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-1636-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1638-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1638-2

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-1638-3

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=795804

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Issue Tracking

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/80187

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16884

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History