CVE-2012-3956: Use After Free
Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3956?
CVE-2012-3956 is rated as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2012-3956?
To fix CVE-2012-3956, update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version that addresses this vulnerability.
Which software is affected by CVE-2012-3956?
CVE-2012-3956 affects Mozilla Firefox versions before 15.0, Thunderbird before 15.0, SeaMonkey before 2.12, and certain versions of Firefox ESR and Thunderbird ESR.
What kind of attacks can exploit CVE-2012-3956?
CVE-2012-3956 can be exploited through remote attacks that may lead to arbitrary code execution or a denial of service.
When was CVE-2012-3956 disclosed?
CVE-2012-3956 was disclosed in August 2012, prompting immediate updates for affected software versions.