← Retour aux CVEs
CVE-2012-3971
N/ADescription
Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.
Details CVE
Score CVSS v3.1N/A
Publie8/29/2012
Derniere modification4/29/2026
Sourcenvd
Observations honeypot0
Produits affectes
mozilla:firefoxmozilla:seamonkeymozilla:thunderbird
Faiblesses (CWE)
CWE-119
References
http://www.securityfocus.com/bid/55304(cve@mitre.org)
http://www.ubuntu.com/usn/USN-1548-1(cve@mitre.org)
http://www.ubuntu.com/usn/USN-1548-2(cve@mitre.org)
https://bugzilla.mozilla.org/show_bug.cgi?id=753230(cve@mitre.org)
https://bugzilla.mozilla.org/show_bug.cgi?id=753623(cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062(cve@mitre.org)
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html(af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.mozilla.org/security/announce/2012/mfsa2012-64.html(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/55304(af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1548-1(af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1548-2(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.mozilla.org/show_bug.cgi?id=753230(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.mozilla.org/show_bug.cgi?id=753623(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.