The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
21 Oct 2024, 13:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:* |
21 Oct 2024, 13:11
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:mozilla:firefox:10.0.3:*:*:*:*:*:*:* |
Information
Published : 2012-04-25 10:10
Updated : 2024-10-21 13:55
NVD link : CVE-2012-0478
Mitre link : CVE-2012-0478
CVE.ORG link : CVE-2012-0478
JSON object : View
Products Affected
mozilla
- thunderbird_esr
- firefox
- seamonkey
- thunderbird
CWE
CWE-264
Permissions, Privileges, and Access Controls