CVE-2012-3988

Fixed in a distro release EPSS 5%

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.

Published 2012-10-10 · CVE record · OSV

Products: mozilla firefox, mozilla thunderbird_esr, mozilla thunderbird, mozilla seamonkey, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, suse linux_enterprise_desktop, suse linux_enterprise_sdk, suse linux_enterprise_server

Distro releases