CVE-2012-1949

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 3.75% Top 15%

Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory mozilla.org

Affected: n/a n/a

References

Link	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=757431
http://secunia.com/advisories/49992	third party advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=766304
https://bugzilla.mozilla.org/show_bug.cgi?id=752662
http://www.securitytracker.com/id?1027256	vdb entry
https://bugzilla.mozilla.org/show_bug.cgi?id=718290
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17027	vdb entry signature
http://www.ubuntu.com/usn/USN-1509-2	vendor advisory
http://www.securitytracker.com/id?1027258	vdb entry
https://bugzilla.mozilla.org/show_bug.cgi?id=765179
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor advisory
http://www.ubuntu.com/usn/USN-1510-1	vendor advisory
http://osvdb.org/84006	vdb entry
https://bugzilla.mozilla.org/show_bug.cgi?id=754725
https://bugzilla.mozilla.org/show_bug.cgi?id=766018
https://bugzilla.mozilla.org/show_bug.cgi?id=717488
http://www.mozilla.org/security/announce/2012/mfsa2012-42.html	vendor advisory
http://secunia.com/advisories/49965	third party advisory
http://www.securitytracker.com/id?1027257	vdb entry
https://bugzilla.mozilla.org/show_bug.cgi?id=712914
https://bugzilla.mozilla.org/show_bug.cgi?id=743876
https://bugzilla.mozilla.org/show_bug.cgi?id=725499
http://www.securityfocus.com/bid/54580	vdb entry
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor advisory
http://secunia.com/advisories/49994	third party advisory
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor advisory
http://secunia.com/advisories/49968	third party advisory
http://www.ubuntu.com/usn/USN-1509-1	vendor advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=738841
http://secunia.com/advisories/49993	third party advisory
http://secunia.com/advisories/49972	third party advisory

Frequently Asked Questions

What is the severity of CVE-2012-1949?: CVE-2012-1949 has been scored as a critical severity vulnerability.
How to fix CVE-2012-1949?: To fix CVE-2012-1949, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2012-1949 being actively exploited in the wild?: It is possible that CVE-2012-1949 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.