Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-5829

Fixed in a distro release EPSS 8%

Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.

Published 2012-11-21 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, mozilla thunderbird_esr, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, canonical ubuntu_linux, debian_linux

Distro releases

ReleasePackageFixed in
Debian 6.0iceape2.0.11-17
Debian 6.0icedove3.0.11-1+squeeze15
Debian 6.0iceweasel3.5.16-20
Red Hat Enterprise Linux 5firefox0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5firefox-debuginfo0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5thunderbird0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5thunderbird-debuginfo0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5xulrunner0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5xulrunner-debuginfo0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5xulrunner-devel0:10.0.11-1.el5_8
Red Hat Enterprise Linux 6firefox0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6firefox-debuginfo0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6thunderbird0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6thunderbird-debuginfo0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6xulrunner0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6xulrunner-debuginfo0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6xulrunner-devel0:10.0.11-1.el6_3
Red Hat rhel productivity 5thunderbird0:10.0.11-1.el5_8
Red Hat rhel productivity 5thunderbird-debuginfo0:10.0.11-1.el5_8
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1