Back to Database
Status published
Critical
CVE-2012-4218
Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before...
Vulnerability Description
Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-4218
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.ubuntu.com/usn/USN-1638-3
- http://secunia.com/advisories/51370
- http://www.securityfocus.com/bid/56640
- http://www.ubuntu.com/usn/USN-1638-2
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html
- http://www.ubuntu.com/usn/USN-1636-1
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=767765
- http://secunia.com/advisories/51434
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
- http://secunia.com/advisories/51439
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16885
- http://secunia.com/advisories/51440
- http://www.ubuntu.com/usn/USN-1638-1
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html
- http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html
- http://secunia.com/advisories/51381
- http://secunia.com/advisories/51369
- http://www.mozilla.org/security/announce/2012/mfsa2012-105.html
More from mozilla
View All →CVE-2025-66453
Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function
Medium
5.5
CVE-2022-29167
ReDoS vulnerability in header parsing in hawk
High
7.4
CVE-2021-21354
Open redirect in pollbot
High
7.4
CVE-2020-15660
Missing checks on Content-Type headers in geckodriver before 0.27.0 could...
High
8.8
CVE-2018-7753
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes...
Critical
9.8
Affected Vendor
mozilla
View all reports →Affected Software
firefox, seamonkey, thunderbird, ubuntu linux, opensuse, linux enterprise desktop, linux enterprise server, linux enterprise software development kit
Vulnerable Versions:
0, 10.04, 11.10, 12.04, 12.10, 11.4, 12.1, 12.2, 10, 11
Timeline
Official Publish:
November 21st, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.