CVE-2012-5842
Last modified
CVE-2012-5842 is a vulnerability of currently unknown severity. Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.. EPSS estimates a 4.79% chance of exploitation in the next 30 days.
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Mozilla | Firefox | < 10.0.11 | — |
| Mozilla | Firefox | < 17.0 | — |
| Mozilla | Seamonkey | < 2.14 | — |
| Mozilla | Thunderbird | < 17.0 | — |
| Mozilla | Thunderbird Esr | < 10.0.11 | — |
| Opensuse | Opensuse | 11.4 | — |
| Opensuse | Opensuse | 12.1 | — |
| Opensuse | Opensuse | 12.2 | — |
| Suse | Linux Enterprise Desktop | 10 | Sp4 |
| Suse | Linux Enterprise Desktop | 11 | Sp2 |
| Suse | Linux Enterprise Server | 10 | Sp4 |
| Suse | Linux Enterprise Server | 11 | Sp2 |
| Suse | Linux Enterprise Software Development Kit | 10 | Sp4 |
| Suse | Linux Enterprise Software Development Kit | 11 | Sp2 |
| Canonical | Ubuntu Linux | 10.04 | — |
| Canonical | Ubuntu Linux | 11.10 | — |
| Canonical | Ubuntu Linux | 12.04 | — |
| Canonical | Ubuntu Linux | 12.10 | — |
| Redhat | Enterprise Linux Desktop | 5.0 | — |
| Redhat | Enterprise Linux Desktop | 6.0 | — |
| Redhat | Enterprise Linux Eus | 6.3 | — |
| Redhat | Enterprise Linux Server | 5.0 | — |
| Redhat | Enterprise Linux Server | 6.0 | — |
| Redhat | Enterprise Linux Workstation | 5.0 | — |
| Redhat | Enterprise Linux Workstation | 6.0 | — |
| Debian | Debian Linux | 6.0 | — |
| Debian | Debian Linux | 7.0 | — |
References
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.htmlMailing List, Third Party Advisory
- http://osvdb.org/87596Broken Link
- http://rhn.redhat.com/errata/RHSA-2012-1482.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1483.htmlThird Party Advisory
- http://secunia.com/advisories/51359Third Party Advisory
- http://secunia.com/advisories/51360Third Party Advisory
- http://secunia.com/advisories/51369Third Party Advisory
- http://secunia.com/advisories/51370Third Party Advisory
- http://secunia.com/advisories/51381Third Party Advisory
- http://secunia.com/advisories/51434Third Party Advisory
- http://secunia.com/advisories/51439Third Party Advisory
- http://secunia.com/advisories/51440Third Party Advisory
- http://www.debian.org/security/2012/dsa-2583Third Party Advisory
- http://www.debian.org/security/2012/dsa-2584Third Party Advisory
- http://www.debian.org/security/2012/dsa-2588Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:173Third Party Advisory
- http://www.securityfocus.com/bid/56611Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1636-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-3Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=736537Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=793848Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=802168Issue Tracking, Patch, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=805957Issue Tracking, Patch, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=809674Issue Tracking, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80169Third Party Advisory, VDB Entry
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.htmlMailing List, Third Party Advisory
- http://osvdb.org/87596Broken Link
- http://rhn.redhat.com/errata/RHSA-2012-1482.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1483.htmlThird Party Advisory
- http://secunia.com/advisories/51359Third Party Advisory
- http://secunia.com/advisories/51360Third Party Advisory
- http://secunia.com/advisories/51369Third Party Advisory
- http://secunia.com/advisories/51370Third Party Advisory
- http://secunia.com/advisories/51381Third Party Advisory
- http://secunia.com/advisories/51434Third Party Advisory
- http://secunia.com/advisories/51439Third Party Advisory
- http://secunia.com/advisories/51440Third Party Advisory
- http://www.debian.org/security/2012/dsa-2583Third Party Advisory
- http://www.debian.org/security/2012/dsa-2584Third Party Advisory
- http://www.debian.org/security/2012/dsa-2588Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:173Third Party Advisory
- http://www.securityfocus.com/bid/56611Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1636-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-1638-3Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=736537Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=793848Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=802168Issue Tracking, Patch, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=805957Issue Tracking, Patch, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=809674Issue Tracking, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80169Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-5842?
How severe is CVE-2012-5842?
How do I fix CVE-2012-5842?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-5836Mozilla Firefox before 17.0, Thunderbird before 17.0, and Se…
- CVE-2012-5837The Web Developer Toolbar in Mozilla Firefox before 17.0 exe…
- CVE-2012-5838The copyTexImage2D implementation in the WebGL subsystem in …
- CVE-2012-5839Heap-based buffer overflow in the gfxShapedWord::CompressedG…
- CVE-2012-5840Use-after-free vulnerability in the nsTextEditorState::Prepa…
- CVE-2012-5841Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11…
- CVE-2012-5843Multiple unspecified vulnerabilities in the browser engine i…
- CVE-2012-5844Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-5845Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-5846Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-5847Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-5848Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2012-5842?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
