Tracker / CVE-2012-3967
CVE-2012-3967
High 9.3
The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| mozilla | firefox · … → 15.0 |
| mozilla | firefox · 10.0 → 10.0.7 |
| mozilla | seamonkey · … → 2.12 |
| mozilla | thunderbird · … → 15.0 |
| mozilla | thunderbird_esr · 10.0 → 10.0.7 |
| opensuse | opensuse |
| redhat | enterprise_linux_desktop |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_workstation |
| suse | linux_enterprise_desktop |
| suse | linux_enterprise_server |
| suse | linux_enterprise_software_development_kit |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.