CVE-2012-1960: Infoleak
The qcmstransformdatargboutlutsse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1960?
CVE-2012-1960 has a severity rating that can allow remote attackers to obtain sensitive information, indicating a high risk level.
How do I fix CVE-2012-1960?
To fix CVE-2012-1960, it is recommended to update Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version available.
Which versions of software are affected by CVE-2012-1960?
CVE-2012-1960 affects Mozilla Firefox versions 4.x through 13.0, Thunderbird versions 5.0 through 13.0, and SeaMonkey versions prior to 2.11.
What type of vulnerability is CVE-2012-1960?
CVE-2012-1960 is a vulnerability that involves improper handling of crafted color profiles, potentially leading to disclosure of information from process memory.
Can exploiting CVE-2012-1960 lead to complete system compromise?
Exploiting CVE-2012-1960 can lead to unauthorized information disclosure, but it does not directly result in complete system compromise.