Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-5830

Fixed in a distro release EPSS 4%

Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.

Published 2012-11-21 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, mozilla thunderbird_esr, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, suse_linux_enterprise_software_development_kit, canonical ubuntu_linux, opensuse, suse_linux_enterprise_desktop, suse_linux_enterprise_server

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 5firefox0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5firefox-debuginfo0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5thunderbird0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5thunderbird-debuginfo0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5xulrunner0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5xulrunner-debuginfo0:10.0.11-1.el5_8
Red Hat Enterprise Linux 5xulrunner-devel0:10.0.11-1.el5_8
Red Hat Enterprise Linux 6firefox0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6firefox-debuginfo0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6thunderbird0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6thunderbird-debuginfo0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6xulrunner0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6xulrunner-debuginfo0:10.0.11-1.el6_3
Red Hat Enterprise Linux 6xulrunner-devel0:10.0.11-1.el6_3
Red Hat rhel productivity 5thunderbird0:10.0.11-1.el5_8
Red Hat rhel productivity 5thunderbird-debuginfo0:10.0.11-1.el5_8
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1