CVE-2012-1939 in Firefox ESR

Summary

jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/30/2012
• Disclosure: 06/05/2012
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 9.6
• EPSS: 0.03612
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1939
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1939
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1939/