Secunia
|
|

CVE Reference: CVE-2012-0447 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2012-0447 |
|
|
Description: Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/72856 SUSE http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html SAID Secunia Advisory: SA49055 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14912 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2012:013 CONFIRM http://www.mozilla.org/security/announce/2012/mfsa2012-06.html |
|
| Return to the previous page. |
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |