CVE-2012-3967: Critical severity firefox vulnerability
The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3967?
CVE-2012-3967 is classified as a moderate severity vulnerability due to its potential impact on system security when exploited.
How do I fix CVE-2012-3967?
To fix CVE-2012-3967, upgrade to the latest version of Mozilla Firefox, Thunderbird, or SeaMonkey depending on the affected software.
Which products are affected by CVE-2012-3967?
CVE-2012-3967 affects Mozilla Firefox versions before 15.0, Thunderbird before 15.0, and SeaMonkey before version 2.12.
Can CVE-2012-3967 be exploited remotely?
Yes, CVE-2012-3967 can potentially be exploited remotely when vulnerable software operates with certain Mesa drivers.
What platforms are vulnerable to CVE-2012-3967?
CVE-2012-3967 primarily affects users running certain versions of Firefox, Thunderbird, and SeaMonkey on Linux platforms.