CVE-2012-0444 in Firefox

Sumário (Inglês)

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

09/01/2012

Divulgação

01/02/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
4588	Mozilla Firefox Ogg Vorbis File Decoder Negação de Serviço	404	Não provado	Correção oficial	CVE-2012-0444

Fontes

• MITRE
• NVD
• CVE Details