CVE-2012-0472 in Firefox
Summary
The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
01/09/2012
Disclosure
04/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5303 | Mozilla Firefox Font Rendering cairo_dwrite_font_face memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2012-0472 |