CVE-2012-0447: Infoleak
Published Feb 1, 2012
·Updated
Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
Affected Software
126 affected components
Mozilla Firefox=4.0
Mozilla Firefox=4.0-beta1
Mozilla Firefox=4.0-beta10
Mozilla Firefox=4.0-beta11
Mozilla Firefox=4.0-beta12
Mozilla Firefox=4.0-beta2
Mozilla Firefox=4.0-beta3
Mozilla Firefox=4.0-beta4
Mozilla Firefox=4.0-beta5
Mozilla Firefox=4.0-beta6
Mozilla Firefox=4.0-beta7
Mozilla Firefox=4.0-beta8
Mozilla Firefox=4.0-beta9
Mozilla Firefox=4.0.1
Mozilla Firefox=5.0
Mozilla Firefox=5.0.1
Mozilla Firefox=6.0
Mozilla Firefox=6.0.1
Mozilla Firefox=6.0.2
Mozilla Firefox=7.0
Mozilla Firefox=8.0
Mozilla Firefox=8.0.1
Mozilla Firefox=9.0
Mozilla Thunderbird=5.0
Mozilla Thunderbird=6.0
Mozilla Thunderbird=6.0.1
Mozilla Thunderbird=6.0.2
Mozilla Thunderbird=7.0
Mozilla Thunderbird=8.0
Mozilla Thunderbird=9.0
Mozilla SeaMonkey<=2.7
Mozilla SeaMonkey=1.0-alpha
Mozilla SeaMonkey=1.0-beta
Mozilla SeaMonkey=1.0.1
Mozilla SeaMonkey=1.0.2
Mozilla SeaMonkey=1.0.3
Mozilla SeaMonkey=1.0.4
Mozilla SeaMonkey=1.0.5
Mozilla SeaMonkey=1.0.6
Mozilla SeaMonkey=1.0.7
Mozilla SeaMonkey=1.0.8
Mozilla SeaMonkey=1.0.9
Mozilla SeaMonkey=1.1
Mozilla SeaMonkey=1.1-alpha
Mozilla SeaMonkey=1.1-beta
Mozilla SeaMonkey=1.1.1
Mozilla SeaMonkey=1.1.2
Mozilla SeaMonkey=1.1.3
Mozilla SeaMonkey=1.1.4
Mozilla SeaMonkey=1.1.5
Mozilla SeaMonkey=1.1.6
Mozilla SeaMonkey=1.1.7
Mozilla SeaMonkey=1.1.8
Mozilla SeaMonkey=1.1.9
Mozilla SeaMonkey=1.1.10
Mozilla SeaMonkey=1.1.11
Mozilla SeaMonkey=1.1.12
Mozilla SeaMonkey=1.1.13
Mozilla SeaMonkey=1.1.14
Mozilla SeaMonkey=1.1.15
Mozilla SeaMonkey=1.1.16
Mozilla SeaMonkey=1.1.17
Mozilla SeaMonkey=1.1.18
Mozilla SeaMonkey=1.1.19
Mozilla SeaMonkey=2.-beta3
Mozilla SeaMonkey=2.0
Mozilla SeaMonkey=2.0-alpha_1
Mozilla SeaMonkey=2.0-alpha_2
Mozilla SeaMonkey=2.0-alpha_3
Mozilla SeaMonkey=2.0-beta_1
Mozilla SeaMonkey=2.0-beta_2
Mozilla SeaMonkey=2.0-rc1
Mozilla SeaMonkey=2.0-rc2
Mozilla SeaMonkey=2.0.1
Mozilla SeaMonkey=2.0.2
Mozilla SeaMonkey=2.0.3
Mozilla SeaMonkey=2.0.4
Mozilla SeaMonkey=2.0.5
Mozilla SeaMonkey=2.0.6
Mozilla SeaMonkey=2.0.7
Mozilla SeaMonkey=2.0.8
Mozilla SeaMonkey=2.0.9
Mozilla SeaMonkey=2.0.10
Mozilla SeaMonkey=2.0.11
Mozilla SeaMonkey=2.0.12
Mozilla SeaMonkey=2.0.13
Mozilla SeaMonkey=2.0.14
Mozilla SeaMonkey=2.1
Mozilla SeaMonkey=2.1-alpha1
Mozilla SeaMonkey=2.1-alpha2
Mozilla SeaMonkey=2.1-alpha3
Mozilla SeaMonkey=2.1-beta1
Mozilla SeaMonkey=2.1-beta2
Mozilla SeaMonkey=2.1-beta3
Mozilla SeaMonkey=2.1-rc1
Mozilla SeaMonkey=2.1-rc2
Mozilla SeaMonkey=2.2
Mozilla SeaMonkey=2.2-beta1
Mozilla SeaMonkey=2.2-beta2
Mozilla SeaMonkey=2.3
Mozilla SeaMonkey=2.3-beta1
Mozilla SeaMonkey=2.3-beta2
Mozilla SeaMonkey=2.3-beta3
Mozilla SeaMonkey=2.3.1
Mozilla SeaMonkey=2.3.2
Mozilla SeaMonkey=2.3.3
Mozilla SeaMonkey=2.4
Mozilla SeaMonkey=2.4-beta1
Mozilla SeaMonkey=2.4-beta2
Mozilla SeaMonkey=2.4-beta3
Mozilla SeaMonkey=2.4.1
Mozilla SeaMonkey=2.5
Mozilla SeaMonkey=2.5-beta1
Mozilla SeaMonkey=2.5-beta2
Mozilla SeaMonkey=2.5-beta3
Mozilla SeaMonkey=2.5-beta4
Mozilla SeaMonkey=2.6
Mozilla SeaMonkey=2.6-beta1
Mozilla SeaMonkey=2.6-beta2
Mozilla SeaMonkey=2.6-beta3
Mozilla SeaMonkey=2.6-beta4
Mozilla SeaMonkey=2.6.1
Mozilla SeaMonkey=2.7-beta1
Mozilla SeaMonkey=2.7-beta2
Mozilla SeaMonkey=2.7-beta3
Mozilla SeaMonkey=2.7-beta4
Event History
Feb 1, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0447?
CVE-2012-0447 has been rated as a moderate severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2012-0447?
To mitigate CVE-2012-0447, users should upgrade to the latest version of Mozilla Firefox, Thunderbird, or SeaMonkey that resolves the vulnerability.
3
Which versions of Mozilla software are affected by CVE-2012-0447?
CVE-2012-0447 affects Mozilla Firefox versions 4.x to 9.0, Thunderbird versions 5.0 to 9.0, and SeaMonkey versions prior to 2.7.
4
What type of vulnerability is CVE-2012-0447 classified as?
CVE-2012-0447 is classified as an information disclosure vulnerability.
5
Can CVE-2012-0447 be exploited remotely?
Yes, CVE-2012-0447 can be exploited by remote attackers through specially crafted images.