CVE-2012-0454
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.3%
Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library.
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=684555http://secunia.com/advisories/48402http://secunia.com/advisories/48561http://secunia.com/advisories/48629https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14258http://www.mandriva.com/security/advisories?name=MDVSA-2012:032http://www.mozilla.org/security/announce/2012/mfsa2012-12.htmlhttp://www.securitytracker.com/id?1026801http://www.securitytracker.com/id?1026803http://www.securitytracker.com/id?1026804