NVD Vulnerability Detail

CVE-2012-0463

Summary	The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.
Publication Date	March 15, 2012, 4:55 a.m.
Registration Date	Jan. 28, 2021, 2:53 p.m.
Last Update	Nov. 21, 2024, 10:35 a.m.

CVSS2.0 : HIGH
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox::::::::			3.6.27

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox::::::::			10.0	4.0

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox:10.0:::::::*
cpe:2.3:a:mozilla:firefox:10.0.2:::::::*
cpe:2.3:a:mozilla:firefox:10.0.1:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:mozilla:thunderbird::::::::		1.0	3.1.19

Configuration5		or higher	or less	more than	less than
cpe:2.3:a:mozilla:thunderbird::::::::			10.0	5.0

Configuration6	or higher	or less	more than	less than
cpe:2.3:a:mozilla:thunderbird_esr:10.0:::::::*
cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:::::::*
cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:::::::*

Configuration7	or higher	or less	more than	less than
cpe:2.3:a:mozilla:seamonkey:2.0.10:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.10:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.2:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.13:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7:beta3::::::
cpe:2.3:a:mozilla:seamonkey:1.5.0.10:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7:beta1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.0.4:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:alpha2::::::
cpe:2.3:a:mozilla:seamonkey:2.0.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.2:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.17:::::::*
cpe:2.3:a:mozilla:seamonkey:2.3.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2::::::
cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.8:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0:beta::::::
cpe:2.3:a:mozilla:seamonkey:1.1:alpha::::::
cpe:2.3:a:mozilla:seamonkey:2.7:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.0:rc2::::::
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3::::::
cpe:2.3:a:mozilla:seamonkey:2.7:beta5::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta2::::::
cpe:2.3:a:mozilla:seamonkey:1.0:alpha::::::
cpe:2.3:a:mozilla:seamonkey:1.1.12:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.12:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.14:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.11:::::::*
cpe:2.3:a:mozilla:seamonkey:2.3:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.0:beta_2::::::
cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:rc1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.11:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1::::::
cpe:2.3:a:mozilla:seamonkey:1.5.0.9:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1:beta::::::
cpe:2.3:a:mozilla:seamonkey:2.3:beta2::::::
cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.9:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:alpha1::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta4::::::
cpe:2.3:a:mozilla:seamonkey:1.5.0.8:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.15:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:beta4::::::
cpe:2.3:a:mozilla:seamonkey:2.0.14:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.7:::::::*
cpe:2.3:a:mozilla:seamonkey:2.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.16:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.0:beta_1::::::
cpe:2.3:a:mozilla:seamonkey:2.5:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.1:rc2::::::
cpe:2.3:a:mozilla:seamonkey:2.3:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.3:beta1::::::
cpe:2.3:a:mozilla:seamonkey:1.1.19:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.1:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.0.5:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.3.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:rc1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7.2:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.13:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.18:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7:::::::*
cpe:2.3:a:mozilla:seamonkey:2.2:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.7.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:alpha3::::::
cpe:2.3:a:mozilla:seamonkey:2.3.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.6.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::*
cpe:2.3:a:mozilla:seamonkey:2.2:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.7:beta4::::::
cpe:2.3:a:mozilla:seamonkey:-:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
2	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html
3	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	Third Party Advisory
4	http://secunia.com/advisories/48402
5	http://secunia.com/advisories/48553	Third Party Advisory
6	http://secunia.com/advisories/48561	Third Party Advisory
7	http://secunia.com/advisories/48624	Third Party Advisory
8	http://secunia.com/advisories/48629	Third Party Advisory
9	http://www.mozilla.org/security/announce/2012/mfsa2012-19.html	Vendor Advisory
10	http://www.securityfocus.com/bid/52466	Third Party Advisory VDB Entry
11	http://www.securitytracker.com/id?1026801
12	http://www.securitytracker.com/id?1026803
13	http://www.securitytracker.com/id?1026804
14	https://bugzilla.mozilla.org/show_bug.cgi?id=688208	Issue Tracking Vendor Advisory
15	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15143	Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
17	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15143	Third Party Advisory
18	https://bugzilla.mozilla.org/show_bug.cgi?id=688208	Issue Tracking Vendor Advisory
19	http://www.securitytracker.com/id?1026804
20	http://www.securitytracker.com/id?1026803
21	http://www.securitytracker.com/id?1026801
22	http://www.securityfocus.com/bid/52466	Third Party Advisory VDB Entry
23	http://www.mozilla.org/security/announce/2012/mfsa2012-19.html	Vendor Advisory
24	http://secunia.com/advisories/48629	Third Party Advisory
25	http://secunia.com/advisories/48624	Third Party Advisory
26	http://secunia.com/advisories/48561	Third Party Advisory
27	http://secunia.com/advisories/48553	Third Party Advisory
28	http://secunia.com/advisories/48402
29	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	Third Party Advisory
30	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

複数の Mozilla 製品のブラウザエンジンの nsWindow 実装におけるサービス運用妨害 (DoS) の脆弱性

Title	複数の Mozilla 製品のブラウザエンジンの nsWindow 実装におけるサービス運用妨害 (DoS) の脆弱性
Summary	複数の Mozilla 製品のブラウザエンジンの nsWindow の実装は、イベントディスパッチスレッドの後にインスタンスの有効性をチェックしないため、サービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。
Possible impacts	第三者により、サービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる、または任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 13, 2012, midnight
Registration Date	March 16, 2012, 2:12 p.m.
Last Update	July 30, 2012, 5:22 p.m.

Affected System

Mozilla Foundation

Mozilla Firefox 3.6.28 未満

Mozilla Firefox 4.x から 10.0

Mozilla Firefox ESR 10.0.3 未満の 10.x

Mozilla SeaMonkey 2.8 未満

Mozilla Thunderbird 3.1.20 未満

Mozilla Thunderbird 5.0 から 10.0

Mozilla Thunderbird ESR 10.0.3 未満の 10.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-0463	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0463
National Vulnerability Database (NVD)
2	CVE-2012-0463	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0463

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Mozilla Foundation
1	Seamonkey	http://www.seamonkey-project.org
Mozilla Foundation Security Advisory
2	MFSA 2012-19	http://www.mozilla.org/security/announce/2012/mfsa2012-19.html
Mozilla Foundation セキュリティアドバイザリ
3	MFSA2012-19	http://www.mozilla-japan.org/security/announce/2012/mfsa2012-19.html
opensuse-updates
4	openSUSE-SU-2012:0417	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html

Change Log

No	Changed Details	Date of change
0	[2012年03月16日] 掲載 [2012年07月30日] ベンダ情報：openSUSE (openSUSE-SU-2012:0417) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration7	or higher	or less	more than	less than
cpe:2.3:a:mozilla:seamonkey:2.0.10:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.10:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.2:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.13:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7:beta3::::::
cpe:2.3:a:mozilla:seamonkey:1.5.0.10:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7:beta1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.0.4:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:alpha2::::::
cpe:2.3:a:mozilla:seamonkey:2.0.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.2:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.17:::::::*
cpe:2.3:a:mozilla:seamonkey:2.3.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2::::::
cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.8:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0:beta::::::
cpe:2.3:a:mozilla:seamonkey:1.1:alpha::::::
cpe:2.3:a:mozilla:seamonkey:2.7:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.0:rc2::::::
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3::::::
cpe:2.3:a:mozilla:seamonkey:2.7:beta5::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta2::::::
cpe:2.3:a:mozilla:seamonkey:1.0:alpha::::::
cpe:2.3:a:mozilla:seamonkey:1.1.12:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.12:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.14:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.11:::::::*
cpe:2.3:a:mozilla:seamonkey:2.3:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.0:beta_2::::::
cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:rc1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.11:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1::::::
cpe:2.3:a:mozilla:seamonkey:1.5.0.9:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1:beta::::::
cpe:2.3:a:mozilla:seamonkey:2.3:beta2::::::
cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.9:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:alpha1::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta4::::::
cpe:2.3:a:mozilla:seamonkey:1.5.0.8:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4.1:::::::*
cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.15:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:beta4::::::
cpe:2.3:a:mozilla:seamonkey:2.0.14:::::::*
cpe:2.3:a:mozilla:seamonkey:2.5:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.7:::::::*
cpe:2.3:a:mozilla:seamonkey:2.2:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.16:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:beta2::::::
cpe:2.3:a:mozilla:seamonkey:2.6:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.0:beta_1::::::
cpe:2.3:a:mozilla:seamonkey:2.5:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.1:rc2::::::
cpe:2.3:a:mozilla:seamonkey:2.3:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.3:beta1::::::
cpe:2.3:a:mozilla:seamonkey:1.1.19:::::::*
cpe:2.3:a:mozilla:seamonkey:2.4:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.1:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.0.5:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.3.3:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:rc1::::::
cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7.2:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.13:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.18:::::::*
cpe:2.3:a:mozilla:seamonkey:2.7:::::::*
cpe:2.3:a:mozilla:seamonkey:2.2:beta3::::::
cpe:2.3:a:mozilla:seamonkey:2.7.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0.6:::::::*
cpe:2.3:a:mozilla:seamonkey:2.1:alpha3::::::
cpe:2.3:a:mozilla:seamonkey:2.3.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.6.1:::::::*
cpe:2.3:a:mozilla:seamonkey:2.0:::::::*
cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::*
cpe:2.3:a:mozilla:seamonkey:2.2:beta1::::::
cpe:2.3:a:mozilla:seamonkey:2.7:beta4::::::
cpe:2.3:a:mozilla:seamonkey:-:::::::*