CVE-2012-3971

Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2012-08-29

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Firefox (Mozilla)
• Seamonkey (Mozilla)
• Thunderbird (Mozilla)

References

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
• http://www.mozilla.org/security/announce/2012/mfsa2012-64.html
• http://www.securityfocus.com/bid/55304
• http://www.ubuntu.com/usn/USN-1548-1
• http://www.ubuntu.com/usn/USN-1548-2
• https://bugzilla.mozilla.org/show_bug.cgi?id=753230
• https://bugzilla.mozilla.org/show_bug.cgi?id=753623
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062