CVE-2012-1939: Buffer Overflow

Published Jun 5, 2012

Updated

jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.

Affected Software

15 affected components

Mozilla Firefox=10.0

Mozilla Firefox=10.0.1

Mozilla Firefox=10.0.2

Mozilla Firefox=10.0.3

Mozilla Firefox=10.0.4

Mozilla Thunderbird=10.0

Mozilla Thunderbird=10.0.1

Mozilla Thunderbird=10.0.2

Mozilla Thunderbird=10.0.3

Mozilla Thunderbird=10.0.4

Mozilla Firefox ESR=10.0

Mozilla Firefox ESR=10.0.1

Mozilla Firefox ESR=10.0.2

Mozilla Firefox ESR=10.0.3

Mozilla Firefox ESR=10.0.4

Event History

Jun 5, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1939?

CVE-2012-1939 has a severity level that allows for denial of service through memory corruption or potentially arbitrary code execution.

How do I fix CVE-2012-1939?

To fix CVE-2012-1939, update Mozilla Firefox or Thunderbird to version 10.0.5 or higher.

What versions are affected by CVE-2012-1939?

CVE-2012-1939 affects Mozilla Firefox ESR versions 10.0 to 10.0.4 and Mozilla Thunderbird ESR versions 10.0 to 10.0.4.

What attacks can exploit CVE-2012-1939?

CVE-2012-1939 can be exploited by remote attackers using crafted JavaScript to cause application crashes or memory corruption.

Is CVE-2012-1939 related to JavaScript processing?

Yes, CVE-2012-1939 is specifically related to improper data type determination in JavaScript processing.