CVE-2012-0444
Fixed in a distro release EPSS 8%
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, debian_linux, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvorbis | 1.3.2-1.2 |
| Debian 12 | libvorbisidec | 1.0.2+svn18153-0.1 |
| Debian 13 | libvorbis | 1.3.2-1.2 |
| Debian 13 | libvorbisidec | 1.0.2+svn18153-0.1 |
| Debian 14 | libvorbis | 1.3.2-1.2 |
| Debian 14 | libvorbisidec | 1.0.2+svn18153-0.1 |
| Debian 5.0 | xulrunner | 1.9.0.19-16 |
| Debian 6.0 | iceape | 2.0.11-10 |
| Debian 6.0 | icedove | 3.0.11-1+squeeze7 |
| Debian 6.0 | iceweasel | 3.5.16-12 |
| Debian 6.0 | libvorbis | 1.3.1-1+squeeze1 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.6.26-2.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.6.26-2.el4 |
| Red Hat Enterprise Linux 4 | libvorbis | 1:1.1.0-4.el4.5 |
| Red Hat Enterprise Linux 4 | libvorbis-debuginfo | 1:1.1.0-4.el4.5 |
| Red Hat Enterprise Linux 4 | libvorbis-devel | 1:1.1.0-4.el4.5 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.6.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.6.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | libvorbis | 1:1.1.2-3.el5_7.6 |
| Red Hat Enterprise Linux 5 | libvorbis-debuginfo | 1:1.1.2-3.el5_7.6 |
| Red Hat Enterprise Linux 5 | libvorbis-devel | 1:1.1.2-3.el5_7.6 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.2.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.2.26-1.el5_7 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.2.26-1.el5_7 |
| Red Hat Enterprise Linux 6 | firefox | 0:3.6.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:3.6.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | libvorbis | 1:1.2.3-4.el6_2.1 |
| Red Hat Enterprise Linux 6 | libvorbis-debuginfo | 1:1.2.3-4.el6_2.1 |
| Red Hat Enterprise Linux 6 | libvorbis-devel | 1:1.2.3-4.el6_2.1 |
| Red Hat Enterprise Linux 6 | libvorbis-devel-docs | 1:1.2.3-4.el6_2.1 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:1.9.2.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:1.9.2.26-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:1.9.2.26-1.el6_2 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |
| openSUSE Tumbleweed | libvorbis | 1.3.5-2.1 |