CVE-2012-0464

NameCVE-2012-0464
DescriptionUse-after-free vulnerability in the browser engine in Mozilla Firefox ...
SourceCVE (at NVD; oss-sec, OSVDB, EDB, Red Hat, Ubuntu, Gentoo, SuSE, more)
Debian/oldstablenot vulnerable.
Debian/stablenot vulnerable.
Debian/testingnot vulnerable.
Debian/unstablenot vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
iceape (PTS)squeeze (security)2.0.11-17fixed
icedove (PTS)squeeze, squeeze (security)3.0.11-1+squeeze15fixed
wheezy10.0.12-1fixed
wheezy (security)17.0.10-1~deb7u1fixed
jessie, sid24.4.0-1fixed
iceweasel (PTS)squeeze, squeeze (security)3.5.16-20fixed
wheezy17.0.10esr-1~deb7u1fixed
wheezy (security)24.4.0esr-1~deb7u2fixed
jessie, sid24.4.0esr-1fixed

The information above is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
iceapesource(unstable)2.7.3-1
iceapesourcesqueeze(not affected)
icedovesource(unstable)10.0.3-1
icedovesourcesqueeze(not affected)
iceweaselsource(unstable)10.0.3esr-1
iceweaselsourcesqueeze(not affected)

Notes

[squeeze] - icedove <not-affected> (Vulnerable code not present)
[squeeze] - iceweasel <not-affected> (Vulnerable code not present)
[squeeze] - iceape <not-affected> (Vulnerable code not present)

Search for package or bug name: Reporting problems

Home - Testing Security Team - Debian Security - Source (SVN)