CVE:CVE-2012-1947
CNNVD:CNNVD-201206-051
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 4.x至12.0版本，Firefox ESR 10.0.5之前的10.x版本，Thunderbird 5.0至12.0版本，Thunderbird ESR 10.0.5之前的10.x版本以及SeaMonkey 2.10之前版本中存在基于堆的缓冲区溢出漏洞。远程攻击者可利用该漏洞借助触发字符集转换失败的向量执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,5.0.1,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,8.0.1,9.0,9.0.1,10.0,10.0.1,10.0.2,11.0,12.0,12.0:beta6,and avoid the version 4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,5.0.1,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,8.0.1,9.0,9.0.1,10.0,10.0.1,10.0.2,11.0,12.0,12.0:beta6; Upgrade mozilla firefox_esr to a higher version than 10.0,10.0.1,10.0.2,10.0.3,10.0.4,and avoid the version 10.0,10.0.1,10.0.2,10.0.3,10.0.4; Upgrade mozilla seamonkey to a higher version than 2.9,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.1,2.1:alpha1,2.1:alpha2,2.1:alpha3,2.1:beta1,2.1:beta2,2.1:beta3,2.1:rc1,2.1:rc2,2.2,2.2:beta1,2.2:beta2,2.2:beta3,2.3,2.3:beta1,2.3:beta2,2.3:beta3,2.3.1,2.3.2,2.3.3,2.4,2.4:beta1,2.4:beta2,2.4:beta3,2.4.1,2.5,2.5:beta1,2.5:beta2,2.5:beta3,2.5:beta4,2.6,2.6:beta1,2.6:beta2,2.6:beta3,2.6:beta4,2.6.1,2.7,2.7:beta1,2.7:beta2,2.7:beta3,2.7:beta4,2.7:beta5,2.7.1,2.7.2,2.8,2.8:beta1,2.8:beta2,2.8:beta3,2.8:beta4,2.8:beta5,2.8:beta6,2.9:beta1,2.9:beta2,2.9:beta3,and avoid the version (,2.9],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.1,2.1:alpha1,2.1:alpha2,2.1:alpha3,2.1:beta1,2.1:beta2,2.1:beta3,2.1:rc1,2.1:rc2,2.2,2.2:beta1,2.2:beta2,2.2:beta3,2.3,2.3:beta1,2.3:beta2,2.3:beta3,2.3.1,2.3.2,2.3.3,2.4,2.4:beta1,2.4:beta2,2.4:beta3,2.4.1,2.5,2.5:beta1,2.5:beta2,2.5:beta3,2.5:beta4,2.6,2.6:beta1,2.6:beta2,2.6:beta3,2.6:beta4,2.6.1,2.7,2.7:beta1,2.7:beta2,2.7:beta3,2.7:beta4,2.7:beta5,2.7.1,2.7.2,2.8,2.8:beta1,2.8:beta2,2.8:beta3,2.8:beta4,2.8:beta5,2.8:beta6,2.9:beta1,2.9:beta2,2.9:beta3; Upgrade mozilla thunderbird to a higher version than 5.0,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,9.0,9.0.1,10.0,10.0.1,10.0.2,10.0.3,10.0.4,11.0,12.0,and avoid the version 5.0,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,9.0,9.0.1,10.0,10.0.1,10.0.2,10.0.3,10.0.4,11.0,12.0; Upgrade mozilla thunderbird_esr to a higher version than 10.0,10.0.1,10.0.2,10.0.3,10.0.4,and avoid the version 10.0,10.0.1,10.0.2,10.0.3,10.0.4