CVE-2012-5840: Use After Free
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5840?
CVE-2012-5840 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2012-5840?
To fix CVE-2012-5840, you should upgrade to the latest version of Mozilla Firefox, Thunderbird, or SeaMonkey that addresses this vulnerability.
Which software is affected by CVE-2012-5840?
CVE-2012-5840 affects Mozilla Firefox versions prior to 17.0, Thunderbird versions before 17.0, and SeaMonkey versions before 2.14.
Can CVE-2012-5840 lead to data loss?
Yes, CVE-2012-5840 can lead to data loss as it allows remote attackers to execute arbitrary code.
Are there any workarounds for CVE-2012-5840?
There are no known workarounds for CVE-2012-5840 besides applying the relevant software updates.