Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-4212

Fixed in a distro release EPSS 6%

Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Published 2012-11-21 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, canonical ubuntu_linux, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit

Distro releases

ReleasePackageFixed in
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1