CVE-2012-4212: Use After Free
Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4212?
CVE-2012-4212 is classified as a critical severity use-after-free vulnerability that allows for arbitrary code execution or denial of service.
How do I fix CVE-2012-4212?
To fix CVE-2012-4212, users should upgrade to Mozilla Firefox version 17.0 or later, Thunderbird version 17.0 or later, or SeaMonkey version 2.14 or later.
Which versions are affected by CVE-2012-4212?
CVE-2012-4212 affects Mozilla Firefox versions prior to 17.0, Thunderbird versions prior to 17.0, and SeaMonkey versions prior to 2.14.
Can CVE-2012-4212 lead to data breach?
Yes, CVE-2012-4212 can potentially lead to a data breach through remote code execution, exposing sensitive information.
Is CVE-2012-4212 present in Ubuntu or openSUSE distributions?
Yes, CVE-2012-4212 is present in specific Ubuntu versions (10.04, 11.10, 12.04, 12.10) and openSUSE versions (11.4, 12.1, 12.2) that include the affected software.