Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-1938

Fixed in a distro release EPSS 5%

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.

Published 2012-06-05 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, redhat storage, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 5firefox0:10.0.5-1.el5_8
Red Hat Enterprise Linux 5firefox-debuginfo0:10.0.5-1.el5_8
Red Hat Enterprise Linux 5thunderbird0:10.0.5-2.el5_8
Red Hat Enterprise Linux 5thunderbird-debuginfo0:10.0.5-2.el5_8
Red Hat Enterprise Linux 5xulrunner0:10.0.5-1.el5_8
Red Hat Enterprise Linux 5xulrunner-debuginfo0:10.0.5-1.el5_8
Red Hat Enterprise Linux 5xulrunner-devel0:10.0.5-1.el5_8
Red Hat Enterprise Linux 6firefox0:10.0.5-1.el6_2
Red Hat Enterprise Linux 6firefox-debuginfo0:10.0.5-1.el6_2
Red Hat Enterprise Linux 6thunderbird0:10.0.5-2.el6_2
Red Hat Enterprise Linux 6thunderbird-debuginfo0:10.0.5-2.el6_2
Red Hat Enterprise Linux 6xulrunner0:10.0.5-1.el6_2
Red Hat Enterprise Linux 6xulrunner-debuginfo0:10.0.5-1.el6_2
Red Hat Enterprise Linux 6xulrunner-devel0:10.0.5-1.el6_2
Red Hat rhel productivity 5thunderbird0:10.0.5-2.el5_8
Red Hat rhel productivity 5thunderbird-debuginfo0:10.0.5-2.el5_8
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1