CVE-2012-0444: Buffer Overflow
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0444?
CVE-2012-0444 is classified as a denial of service vulnerability due to memory corruption and application crashes.
What systems are affected by CVE-2012-0444?
CVE-2012-0444 affects Mozilla Firefox versions prior to 3.6.26 and from 4.x to 9.0, Thunderbird versions before 3.1.18 and from 5.0 to 9.0, and SeaMonkey versions before 2.7.
How do I fix CVE-2012-0444?
To fix CVE-2012-0444, users should upgrade to the latest versions of Mozilla Firefox, Thunderbird, and SeaMonkey as specified in the security advisories.
What can attackers do with CVE-2012-0444?
Attackers can exploit CVE-2012-0444 to cause denial of service, leading to application crashes or potentially execute arbitrary code.
Is there a workaround for CVE-2012-0444?
There are no known effective workarounds for CVE-2012-0444 other than updating the vulnerable software.