CVE-2012-0449
No CVSS score yet. EPSS 5.7% chance of exploitation in the next 30 days.
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
- EPSS
- 5.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- mozilla:firefox
- mozilla:seamonkey
- mozilla:thunderbird
- opensuse:opensuse
- suse:linux_enterprise_desktop
- suse:linux_enterprise_server
- suse:linux_enterprise_software_development_kit
References
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
- http://www.debian.org/security/2012/dsa-2400
- http://www.debian.org/security/2012/dsa-2402