CVE-2012-3957

Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.

• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1210.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1211.htmlThird Party Advisory
• http://www.mozilla.org/security/announce/2012/mfsa2012-58.htmlVendor Advisory
• http://www.securityfocus.com/bid/55341Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1548-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1548-2Third Party Advisory
• http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdfThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=774548Issue Tracking, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16940Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1210.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1211.htmlThird Party Advisory
• http://www.mozilla.org/security/announce/2012/mfsa2012-58.htmlVendor Advisory
• http://www.securityfocus.com/bid/55341Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1548-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-1548-2Third Party Advisory
• http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdfThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=774548Issue Tracking, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16940Third Party Advisory

Published

Aug 29, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3951The MySQL component in Plixer Scrutinizer (aka Dell SonicWAL…
• CVE-2012-3952Cross-site scripting (XSS) vulnerability in admin/index.php …
• CVE-2012-3953SQL injection vulnerability in admin/index.php in phpList be…
• CVE-2012-3954Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2…
• CVE-2012-3955ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 a…
• CVE-2012-3956Use-after-free vulnerability in the MediaStreamGraphThreadRu…
• CVE-2012-3958Use-after-free vulnerability in the nsHTMLEditRules::DeleteN…
• CVE-2012-3959Use-after-free vulnerability in the nsRangeUpdater::SelAdjDe…
• CVE-2012-3960Use-after-free vulnerability in the mozSpellChecker::SetCurr…
• CVE-2012-3961Use-after-free vulnerability in the RangeData implementation…
• CVE-2012-3962Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7,…
• CVE-2012-3963Use-after-free vulnerability in the js::gc::MapAllocToTraceK…