CVE catalog

CVE-2012-1940

iceape - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.44% · Oct 25, 2026

Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by changing the size of a container of absolutely positioned elements in a column.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceape6.02.0.11-10vulnerable
Debianiceape6.02.0.11-11vulnerable
Debianiceape6.02.0.11-12vulnerable
Debianiceape6.02.0.11-2vulnerable
Debianiceape6.02.0.11-3vulnerable
Debianiceape6.02.0.11-4vulnerable
Debianiceape6.02.0.11-5vulnerable
Debianiceape6.02.0.11-6vulnerable
Debianiceape6.02.0.11-7vulnerable
Debianiceape6.02.0.11-8vulnerable
Debianiceape6.02.0.11-9vulnerable
Debianiceape6.02.0.11-13fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceapedeb6.02.0.11-13Not reportedDSA-2489-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]