Mozilla Firefox/Thunderbird/SeaMonkey 'array.join' CVE-2012-0464 Memory Corruption Vulnerability

Mozilla Firefox, SeaMonkey, and Thunderbird are prone to a memory-corruption vulnerability that may allow remote code execution.

An attacker could exploit this issue by enticing an unsuspecting user to view malicious content. A successful exploit will result in the execution of arbitrary attacker-supplied code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

This issue is fixed in:

Firefox 11.0
Firefox ESR 10.0.3
Firefox 3.6.28
Thunderbird 11.0
Thunderbird ESR 10.0.3
Thunderbird 3.1.20
SeaMonkey 2.8


 

Privacy Statement
Copyright 2010, SecurityFocus