Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2012-3995: Firefox, Thunderbird, SeaMonkey can be hijacked

CVE-2012-3995 · published 14 years ago

Summary

Older versions of Firefox (before 16.0), Thunderbird (before 16.0) and SeaMonkey (before 2.13) contain a flaw that lets an attacker run code on a user’s computer or crash the program. The problem is caused by a mistake in how the browser handles certain text spacing. Upgrade to the latest releases of these applications as soon as possible to protect your systems.

What to do

Update mozilla thunderbird_esr to version 10.0.8 or later.
Update mozilla thunderbird to version 16.0 or later.
Update mozilla seamonkey to version 2.13 or later.

Affected software

Vendor	Product	Affected versions
mozilla	firefox	< 10.0.8 < 16.0 `cpe:2.3:a:mozilla:firefox::::::::`
mozilla	thunderbird_esr	< 10.0.8 `cpe:2.3:a:mozilla:thunderbird_esr::::::::`
mozilla	thunderbird	< 16.0 `cpe:2.3:a:mozilla:thunderbird::::::::`
mozilla	seamonkey	< 2.13 `cpe:2.3:a:mozilla:seamonkey::::::::`
canonical	ubuntu_linux	10.04 11.04 11.10 12.04 `cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::`
redhat	enterprise_linux_desktop	5.0 6.0 `cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*`
redhat	enterprise_linux_eus	6.3 `cpe:2.3:o:redhat:enterprise_linux_eus:6.3:::::::*`
redhat	enterprise_linux_server	5.0 6.0 `cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*`
redhat	enterprise_linux_workstation	5.0 6.0 `cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*`
suse	linux_enterprise_desktop	10 11 `cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4::::::`
suse	linux_enterprise_sdk	10 `cpe:2.3:o:suse:linux_enterprise_sdk:10:sp4::::::`
suse	linux_enterprise_server	10 11 `cpe:2.3:o:suse:linux_enterprise_server:10:sp4::::::`

Original advisory text

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

References

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1351.html Third Party Advisory
http://secunia.com/advisories/50856 Third Party Advisory
http://secunia.com/advisories/50892 Third Party Advisory
http://secunia.com/advisories/50904 Third Party Advisory
http://secunia.com/advisories/50935 Third Party Advisory
http://secunia.com/advisories/50936 Third Party Advisory
http://secunia.com/advisories/50984 Third Party Advisory
http://secunia.com/advisories/55318 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-85.html Vendor Advisory
http://www.securityfocus.com/bid/56136 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1611-1 Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=765621 Issue Tracking Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79156 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.3 Critical

Exploitation

5% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published10 Oct 2012

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2012-3995 · NVD

Track software like this

Free during beta