CVE-2012-0472 in Mozilla Firefox
要約 (英語)
The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
予約する
2012年01月09日
公開
2012年04月25日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 5303 | Mozilla Firefox Font Rendering cairo_dwrite_font_face メモリ破損 | 119 | 概念実証 | 公式な修正 | CVE-2012-0472 |