CVE-2012-1975

Description

Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.305

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Mozilla Firefox (x64) 14.0Windows
Multiple vulnerabilities affected in Mozilla Firefox ESR (x64) 10.0.6Windows
Multiple vulnerabilities affected in Mozilla Firefox ESR 10.0.6Windows
Multiple vulnerabilities affected in Mozilla Thunderbird 14.0Windows
Multiple vulnerabilities affected in Mozilla Thunderbird ESR 10.0.6Windows
Multiple vulnerabilities affected in Mozilla_Firefox 14.0Windows
Multiple vulnerabilities affected in SeaMonkey 2.9Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 10.0.6Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 14.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 14.0.1Windows
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0.3)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (102.15.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.2.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.3.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.3.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.4.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.4.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.5.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.5.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.6.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.7.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.8.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.8.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.9.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.10.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.10.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.11.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.11.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.12.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.12.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.13.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.14.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 10.0.7Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 14.0-beta5Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.11-beta6Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 10.0.6Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 10.0.6Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 14.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 10.0.6Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 10.0.7Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343016Mozilla Firefox (x64) (132.0.2)
PATCH-310844Mozilla Firefox ESR (x64) (60.9.0)
PATCH-310843Mozilla Firefox ESR (60.9.0)
PATCH-315938Mozilla Thunderbird (68.12.0)
PATCH-343015Mozilla Firefox (132.0.2)
PATCH-341197SeaMonkey (2.53.19)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234