CVE-2012-0452

Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial…

published February 11, 2012

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03040 · 87.3th percentile
Published
2012-02-11T02:00Z
EPSS history
Timeline
  • 11 FEB 02:00Z
    Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial…
    cvelistv5