CVE-2012-5842: canonical ubuntu_linux

CVSS: 9.3v2.0HighModified

Published 21-11-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-5842 is a high (CVSS 9.3) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.79% chance of exploitation in the next 30 days, higher than 91.8% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

4.79%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 3

DSA-2583-1 DSA-2584-1 DSA-2588-1 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1 OPENSUSE-SU-2024:14572-1+2 more

Timeline

21-11-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

4.79%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.79% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.79%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mozilla4 products

firefox< 10.0.11 | < 17.0
seamonkey< 2.14
thunderbird< 17.0
thunderbird_esr< 10.0.11

Redhat4 products

Suse3 products

linux_enterprise_desktop10:sp4 | 11:sp2
linux_enterprise_server10:sp4 | 11:sp2
linux_enterprise_software_development_kit10:sp4 | 11:sp2

Canonical1 product

ubuntu_linuxEOL10.04 | 11.10 | 12.04 | 12.10

Debian1 product

debian_linuxEOL6.0 | 7.0

Opensuse1 product

opensuseEOL11.4 | 12.1 | 12.2

6 vendors · 14 products

References

33 links

osvdb.org/87596VDB EntryX Refsource OSVDBBroken Link
www.ubuntu.com/usn/USN-1638-3Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/51370Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-1638-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-updates/2012-11/msg00093.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-1636-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-1483.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/80169VDB EntryX Refsource XFThird Party Advisory
www.debian.org/security/2012/dsa-2584Vendor AdvisoryX Refsource DEBIANThird Party Advisory

Show all 33 references

rhn.redhat.com/errata/RHSA-2012-1482.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/51434Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-updates/2012-11/msg00090.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=736537X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/51439Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/51440Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-1638-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securityfocus.com/bid/56611VDB EntryX Refsource BIDThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/51359Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2012:173Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=802168X Refsource CONFIRMIssue TrackingPatchVendor Advisory
lists.opensuse.org/opensuse-updates/2012-11/msg00092.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/51381Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16573VDB EntrySignatureX Refsource OVALThird Party Advisory
www.debian.org/security/2012/dsa-2583Vendor AdvisoryX Refsource DEBIANThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=793848X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/51369Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=805957X Refsource CONFIRMIssue TrackingPatchVendor Advisory
secunia.com/advisories/51360Third Party AdvisoryX Refsource SECUNIA
www.mozilla.org/security/announce/2012/mfsa2012-91.htmlX Refsource CONFIRMVendor Advisory
www.debian.org/security/2012/dsa-2588Vendor AdvisoryX Refsource DEBIANThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=809674X Refsource CONFIRMIssue TrackingPatchVendor Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities