CVE-2012-1975

Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0…

published August 29, 2012

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in the PresShell::CompleteMove function, affecting multiple Mozilla products before version 15.0! Think of it like a restaurant that serves a dish but fails to clear away the old plates from the previous guests—when the new dish is served, chaos ensues as diners might accidentally be served something stale! This vulnerability could allow attackers to execute arbitrary code or crash the application, leading to a denial of service. Imagine the frustration as your browser or email client suddenly freezes or behaves erratically, making it hard to get your work done.

Put simply

Think of it like a restaurant that serves a dish but fails to clear away the old plates from the previous guests—when the new dish is served, chaos ensues as diners might accidentally be served something stale! The use-after-free vulnerability exists when an object is accessed after it has been freed, potentially leading to memory corruption. This can allow attackers to manipulate the affected software in unexpected ways, causing instability or executing malicious code.

What to do

This vulnerability could allow attackers to execute arbitrary code or crash the application, leading to a denial of service. Imagine the frustration as your browser or email client suddenly freezes or behaves erratically, making it hard to get your work done. To protect yourself, update Mozilla Firefox, Thunderbird, and SeaMonkey to the latest versions available. Always keep your applications up-to-date to mitigate known vulnerabilities. Check your current version against the latest releases. You've got this! With these updates, you'll be sure to keep your browsing safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05613 · 92.8th percentile
Published
2012-08-29T10:00Z
EPSS history
Timeline
  • 29 AUG 10:00Z
    Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0…
    cvelistv5