CVE-2012-5830: canonical ubuntu_linux Use After Free

CVSS: 8.8v3.1HighModified

Published 21-11-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-5830 is a high (CVSS 8.8) Use After Free vulnerability in canonical ubuntu_linux. EPSS estimates a 3.81% chance of exploitation in the next 30 days, higher than 89.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

46/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (NVD)

EPSS score

3.81%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 5 · Related 3

OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1 OPENSUSE-SU-2024:14572-1 RHSA-2012:1482 RHSA-2012:1483

Timeline

21-11-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.

CVSS metrics

2 scores · 1 source · 2 versions

v3.18.8v2.06.8

EPSS trend

Probability

3.81%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.81% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.81%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Redhat5 products

Mozilla4 products

firefox< 17.0 | ≥ 10.0, < 10.0.11
seamonkey< 2.14
thunderbird< 17.0
thunderbird_esr≥ 10.0, < 10.0.11

Suse3 products

suse_linux_enterprise_desktop10:sp4 | 11:sp2
suse_linux_enterprise_server10:sp4 | 11:sp2
suse_linux_enterprise_software_development_kit11.0:sp2

Canonical1 product

ubuntu_linuxEOL10.04 | 11.10 | 12.04 | 12.10

Opensuse1 product

opensuseEOL11.4 | 12.1 | 12.2

5 vendors · 14 products

References

23 links

www.ubuntu.com/usn/USN-1638-3Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/51370Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-1638-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=775228X Refsource CONFIRMExploitIssue TrackingVendor Advisory
lists.opensuse.org/opensuse-updates/2012-11/msg00093.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-1636-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-1483.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/80183VDB EntryX Refsource XFThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-1482.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 23 references

secunia.com/advisories/51434Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-updates/2012-11/msg00090.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/51439Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/51440Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-1638-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.mozilla.org/security/announce/2012/mfsa2012-106.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/51359Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-updates/2012-11/msg00092.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/51381Third Party AdvisoryX Refsource SECUNIABroken Link
osvdb.org/87598VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/51369Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/51360Third Party AdvisoryX Refsource SECUNIABroken Link

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities