CVE-2012-0469 in Firefox
Summary
Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
01/09/2012
Disclosure
04/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5306 | Mozilla Firefox XPConnect Hashtable resource management | 399 | Proof-of-Concept | Official fix | CVE-2012-0469 |