CVE-2012-1954

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through…

published July 18, 2012

CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Firefox and Thunderbird, ready to cause some chaos! 🕵️‍♂️ Think of this vulnerability like a restaurant that keeps reusing empty plates without cleaning them first. If a waiter tries to serve a new dish on a dirty plate, it could lead to a disastrous mix-up—or, in tech terms, a heap memory corruption! 🍽️ An attacker could trigger a denial of service, making your applications freeze like a restaurant during the dinner rush. In the worst-case scenario, this vulnerability might allow for the execution of arbitrary code, opening the door to all kinds of trouble. ⚡️

Put simply

Think of this vulnerability like a restaurant that keeps reusing empty plates without cleaning them first. If a waiter tries to serve a new dish on a dirty plate, it could lead to a disastrous mix-up—or, in tech terms, a heap memory corruption! 🍽️ This use-after-free flaw in the nsDocument::AdoptNode function allows remote attackers to manipulate memory by adopting nodes multiple times, leading to potential crashes or even malicious code execution.

What to do

An attacker could trigger a denial of service, making your applications freeze like a restaurant during the dinner rush. In the worst-case scenario, this vulnerability might allow for the execution of arbitrary code, opening the door to all kinds of trouble. ⚡️ To shore up your defenses, make sure to update affected software like Firefox, Thunderbird, and SeaMonkey to their latest versions. Specifically, upgrade to Firefox 10.0.6 or later and Thunderbird 10.0.6 or later to patch this vulnerability. 🛡️ You've got this! With these updates, you'll keep your systems safe and sound. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04442 · 91.4th percentile
Published
2012-07-18T10:00Z
EPSS history
Timeline
  • 18 JUL 10:00Z
    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through…
    cvelistv5