CVE-2012-4204

The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

Published: Nov 21, 2012
Updated: Apr 13, 2023
CVE: CVE-2012-4204
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-119

Affected Software
References

Software	From	Fixed in
mozilla / firefox	-	17.0
mozilla / seamonkey	-	2.14
mozilla / thunderbird	-	17.0
suse / linux_enterprise_server	10-sp4	10-sp4.x
suse / linux_enterprise_desktop	11-sp2	11-sp2.x
opensuse / opensuse	11.4	11.4.x
opensuse / opensuse	12.2	12.2.x
suse / linux_enterprise_desktop	10-sp4	10-sp4.x
opensuse / opensuse	12.1	12.1.x
suse / linux_enterprise_server	11-sp2	11-sp2.x
suse / linux_enterprise_software_development_kit	11-sp2	11-sp2.x
suse / linux_enterprise_software_development_kit	10-sp4	10-sp4.x
canonical / ubuntu_linux	11.10	11.10.x
canonical / ubuntu_linux	12.10	12.10.x
canonical / ubuntu_linux	12.04	12.04.x
canonical / ubuntu_linux	10.04	10.04.x

Vulnerability Database

CVE-2012-4204

Deep Security Visibility Without the Complexity