Launchpad.net

CVE 2012-4212

Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

Related bugs and status

CVE-2012-4212 (Candidate) is related to these bugs:

Bug #469752: firefox,3.5/3.6 startup-notification bug

		In	Importance	Status
469752	firefox,3.5/3.6 startup-notification bug	firefox-3.5 (Ubuntu)	Medium	Invalid
469752	firefox,3.5/3.6 startup-notification bug	Mozilla Firefox	Medium	Fix Released
469752	firefox,3.5/3.6 startup-notification bug	firefox-3.5 (Suse)	Medium	Fix Released
469752	firefox,3.5/3.6 startup-notification bug	firefox (Ubuntu)	Medium	Fix Released
469752	firefox,3.5/3.6 startup-notification bug	firefox (Ubuntu Lucid)	Medium	Fix Released
469752	firefox,3.5/3.6 startup-notification bug	firefox-3.5 (Ubuntu Lucid)	Medium	Invalid

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://www.mozilla.org...
CONFIRM: https://bugzilla.mozil...
SUSE: openSUSE-SU-2012:1583
SUSE: openSUSE-SU-2012:1585
SUSE: openSUSE-SU-2012:1586
UBUNTU: USN-1638-1
UBUNTU: USN-1638-3
UBUNTU: USN-1638-2
SUSE: SUSE-SU-2012:1592
UBUNTU: USN-1636-1
SUSE: openSUSE-SU-2013:0175
BID: 56630
SECUNIA: 51369
SECUNIA: 51381
SECUNIA: 51434
SECUNIA: 51439
SECUNIA: 51440
SECUNIA: 51370
OVAL: oval:org.mitre.oval:de...