CVE-2012-3990: Use After Free
Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3990?
CVE-2012-3990 has a high severity rating due to its potential to allow remote code execution.
How do I fix CVE-2012-3990?
To fix CVE-2012-3990, update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version as per the vendor's guidance.
Which products are affected by CVE-2012-3990?
CVE-2012-3990 affects Mozilla Firefox, Thunderbird, Thunderbird ESR, and SeaMonkey versions prior to specified updates.
Can CVE-2012-3990 be exploited remotely?
Yes, CVE-2012-3990 can be exploited remotely by attackers through unspecified vectors.
What are the consequences of CVE-2012-3990?
Exploitation of CVE-2012-3990 can lead to arbitrary code execution on the victim's machine.