CVE-2012-0468
Fixed in a distro release EPSS 4%
The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.
Products: mozilla firefox, mozilla thunderbird, mozilla seamonkey
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | firefox | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:10.0.4-1.el5_8 |
| Red Hat Enterprise Linux 6 | firefox | 0:10.0.4-1.el6_2 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:10.0.4-1.el6_2 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:10.0.4-1.el6_2 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:10.0.4-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:10.0.4-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:10.0.4-1.el6_2 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:10.0.4-1.el6_2 |
| Red Hat rhel productivity 5 | thunderbird | 0:10.0.4-1.el5_8 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:10.0.4-1.el5_8 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |