CVE-2012-0447

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images…

published February 1, 2012

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01791 · 78.1th percentile
Published
2012-02-01T16:00Z
EPSS history
Timeline
  • 01 FEB 16:00Z
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images…
    cvelistv5