CVE:CVE-2012-4185
CNNVD:CNNVD-201210-167
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 16.0之前版本、Firefox ESR 10.0.8之前的10.x版本、Thunderbird 16.0之前版本、Thunderbird ESR 10.0.8之前的10.x版本、SeaMonkey 2.13之前版本中的‘nsCharTraits::length’函数中存在缓冲区溢出漏洞。远程攻击者可利用该漏洞通过未明向量执行任意代码或导致拒绝服务（堆内存破坏）。
solution:Upgrade mozilla firefox_esr to a higher version than 10.0.8,and avoid the version (,10.0.8); Upgrade mozilla thunderbird_esr to a higher version than 10.0.8,and avoid the version (,10.0.8); Upgrade mozilla firefox to a higher version than 16.0,and avoid the version (,16.0); Upgrade mozilla thunderbird to a higher version than 16.0,and avoid the version (,16.0); Upgrade mozilla seamonkey to a higher version than 2.13,and avoid the version (,2.13); Upgrade canonical ubuntu_linux to a higher version than 10.04,11.04,11.10,12.04,and avoid the version 10.04,11.04,11.10,12.04; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.3,and avoid the version 6.3; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp3,and avoid the version 10:sp4,11:sp3; Upgrade suse linux_enterprise_sdk to a higher version than 10:sp4,and avoid the version 10:sp4; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp3,and avoid the version 10:sp4,11:sp3