vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2012-3967

N/A
Published: August 29, 2012 at 10:00 AM UTC
Updated: June 16, 2026 at 11:44 PM UTC
13 products affected across 5 vendorsUbuntu LinuxFirefoxThunderbird· also runs on 1 platform

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 4%

Description

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux· Canonicalrubygems
95%
10.0411.0411.1012.04
Firefox· Mozilla
95%
v < 15.010.0 ≤ v < 10.0.7
Affected range stops below 10.0.7, so it looks safe — our inference, not a vendor statement
Affected range stops below 15.0, so it looks safe — our inference, not a vendor statement
linux-linux-kernel (environment)
Seamonkey· Mozilla
95%
v < 2.12
Affected range stops below 2.12, so it looks safe — our inference, not a vendor statement
linux-linux-kernel (environment)
Thunderbird· Mozilla
95%
v < 15.0
Affected range stops below 15.0, so it looks safe — our inference, not a vendor statement
linux-linux-kernel (environment)
Thunderbird ESR· Mozilla
95%
10.0 ≤ v < 10.0.7
Affected range stops below 10.0.7, so it looks safe — our inference, not a vendor statement
linux-linux-kernel (environment)
openSUSE· openSUSE
95%
12.2
Enterprise Linux Desktop· Red Hatrubygems
95%
5.06.0
Enterprise Linux Eus· Red Hatrpm
95%
6.3
Enterprise Linux Server· Red Hatrubygems
95%
5.06.0
Enterprise Linux Workstation· Red Hatrubygems
95%
5.06.0

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (11)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-1210.html
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-1211.html
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://www.mozilla.org/security/announce/2012/mfsa2012-62.html
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/55277
Vendor Advisoryx_refsource_UBUNTUThird Party Advisory
Source: [email protected]
http://www.ubuntu.com/usn/USN-1548-1

CVSS

9.3HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card