CVE-2012-0470 | BDVDB-2026-49899 Detail
Description#
Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.mozilla.org/security/announce/2012/mfsa2012-23.html
- http://secunia.com/advisories/48922
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16989
- https://bugzilla.mozilla.org/show_bug.cgi?id=734288
- http://secunia.com/advisories/49055
- http://www.debian.org/security/2012/dsa-2458
- http://secunia.com/advisories/48920
- http://www.debian.org/security/2012/dsa-2457
- http://www.debian.org/security/2012/dsa-2464
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:081
- http://secunia.com/advisories/48972
- http://www.securityfocus.com/bid/53225
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:066
- http://secunia.com/advisories/49047
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.