CVE-2012-0470

CVSS V2 High 10 CVSS V3 None
Description
Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."
Overview
  • CVE ID
  • CVE-2012-0470
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2012-04-25T10:10:17
  • Last Modified Date
  • 2018-01-18T02:29:06
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox_esr:10.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:6.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:6.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:7.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:9.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:10.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:10.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:10.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:10.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:11.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird_esr:10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird_esr:10.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird_esr:10.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:*:beta3:*:*:*:*:*:* 1 OR 2.9
cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.1:rc2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.2:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.2:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.2:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.3.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.4:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.4:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.4:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.5:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.5:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.5:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.5:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.6:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.6:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.6:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.6:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.6.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7:beta5:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.7.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:beta3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:beta4:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:beta5:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.8:beta6:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.9:beta1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.9:beta2:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 10
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.mozilla.org/security/announce/2012/mfsa2012-23.html Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=734288
http://www.securityfocus.com/bid/53225
http://secunia.com/advisories/49047
http://secunia.com/advisories/49055
http://secunia.com/advisories/48972
http://secunia.com/advisories/48920
http://secunia.com/advisories/48922
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16989
http://www.mandriva.com/security/advisories?name=MDVSA-2012:081
http://www.mandriva.com/security/advisories?name=MDVSA-2012:066
http://www.debian.org/security/2012/dsa-2464
http://www.debian.org/security/2012/dsa-2458
http://www.debian.org/security/2012/dsa-2457
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2012-0470
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0470
History
Created Old Value New Value Data Type Notes
2022-05-10 18:49:51 Added to TrackCVE