CVE catalog

CVE-2012-0470

iceweasel - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
10.17% · Oct 25, 2026

Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel6.03.5.16-10vulnerable
Debianiceweasel6.03.5.16-10~bpo50+1vulnerable
Debianiceweasel6.03.5.16-11vulnerable
Debianiceweasel6.03.5.16-11~bpo50+1vulnerable
Debianiceweasel6.03.5.16-12vulnerable
Debianiceweasel6.03.5.16-13vulnerable
Debianiceweasel6.03.5.16-4vulnerable
Debianiceweasel6.03.5.16-5vulnerable
Debianiceweasel6.03.5.16-5~bpo50+1vulnerable
Debianiceweasel6.03.5.16-6vulnerable
Debianiceweasel6.03.5.16-6~bpo50+1vulnerable
Debianiceweasel6.03.5.16-7vulnerable
Debianiceweasel6.03.5.16-7~bpo50+1vulnerable
Debianiceweasel6.03.5.16-8vulnerable
Debianiceweasel6.03.5.16-8~bpo50+1vulnerable
Debianiceweasel6.03.5.16-9vulnerable
Debianiceweasel6.03.5.16-14fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb6.03.5.16-14Not reportedDSA-2457-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]