CVE-2012-1938: mozilla firefox
Vulnerability summary
CVE-2012-1938 is a high (CVSS 9.3) vulnerability in mozilla firefox. EPSS estimates a 4.84% chance of exploitation in the next 30 days, higher than 91.9% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 5 · Related 3Timeline
- 05-06-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.84%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
-0.06 pp
From 4.90% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat6 products
- enterprise_linux_desktop5.0 | 6.0
- enterprise_linux_eus6.2
- enterprise_linux_server5.0 | 6.0
- enterprise_linux_server_aus6.2
- enterprise_linux_workstation5.0 | 6.0
Mozilla3 products
- firefox< 13.0
- seamonkey< 2.10
- thunderbird< 13.0
Suse3 products
- linux_enterprise_desktop10:sp4 | 11:sp1
- linux_enterprise_server10:sp4 | 11:sp1
- linux_enterprise_software_development_kit10:sp4 | 11:sp1
Opensuse1 product
- opensuseEOL11.4 | 12.1
4 vendors · 13 products
References
18 links- www.mandriva.com/security/advisories?name=MDVSA-2012:088Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- bugzilla.mozilla.org/show_bug.cgi?id=736012X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory
- bugzilla.mozilla.org/show_bug.cgi?id=670317X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17058VDB EntrySignatureX Refsource OVALThird Party Advisory
Show all 18 references
- bugzilla.mozilla.org/show_bug.cgi?id=730415X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory