CVE-2012-4191: Critical severity firefox vulnerability

Q: What is the severity of CVE-2012-4191?

CVE-2012-4191 has a high severity level due to its potential to cause denial of service or memory corruption.

Q: How do I fix CVE-2012-4191?

To fix CVE-2012-4191, update Mozilla Firefox, Thunderbird, or SeaMonkey to version 16.0.1 or later.

Q: What applications are affected by CVE-2012-4191?

CVE-2012-4191 affects Mozilla Firefox versions prior to 16.0.1, Thunderbird versions prior to 16.0.1, and SeaMonkey versions prior to 2.13.1.

Q: Can CVE-2012-4191 lead to code execution?

Yes, CVE-2012-4191 can potentially allow remote attackers to execute arbitrary code.

Q: What operating systems are impacted by CVE-2012-4191?

CVE-2012-4191 impacts Ubuntu Linux versions 10.04, 11.04, 11.10, and 12.04.

Published Oct 12, 2012

Updated

The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Affected Software

7 affected components

Mozilla Firefox<16.0.1

Mozilla SeaMonkey<2.13.1

Mozilla Thunderbird<16.0.1

Ubuntu=10.04

Ubuntu=11.04

Ubuntu=11.10

Ubuntu=12.04

Remediation

Patch Available

https://bugzilla.mozilla.org/show_bug.cgi?id=798045

Event History

Oct 12, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4191?

CVE-2012-4191 has a high severity level due to its potential to cause denial of service or memory corruption.

How do I fix CVE-2012-4191?