CVE-2012-5838: Buffer Overflow
The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5838?
CVE-2012-5838 has a critical severity rating as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2012-5838?
To fix CVE-2012-5838, upgrade to Mozilla Firefox 17.0, Thunderbird 17.0, or SeaMonkey 2.14 or later.
What software is affected by CVE-2012-5838?
CVE-2012-5838 affects Mozilla Firefox, Thunderbird, SeaMonkey, and various versions of openSUSE and Ubuntu.
Can CVE-2012-5838 cause a system crash?
Yes, CVE-2012-5838 can cause memory corruption leading to application crashes.
Is CVE-2012-5838 remotely exploitable?
Yes, CVE-2012-5838 is remotely exploitable through crafted large image dimensions.