CVE-2012-1939
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does...
9.3 High
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
Exploit likelihood
3.12%Down 1.8 points since Feb 4, 2022
What each source reports
NVD Score used
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
- Record
CVE-2012-1939- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
- Record
CVE-2012-1939- Updated
- 2026-11-02
EUVDEUVD-2012-1948 No score
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
- Record
EUVD-2012-1948- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g43v-55jg-34cf No score
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does...
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted JavaScript code.
- Record
GHSA-g43v-55jg-34cf- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1939 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published June 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=748613
mandriva.com/security/advisories?name=MDVSA-2012:088
debian.org/security/2012/dsa-2499
rhn.redhat.com/errata/RHSA-2012-0710.html
mozilla.org/security/announce/2012/mfsa2012-34.html
lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html
Show 46 moreShow less
nvd.nist.gov/vuln/detail/CVE-2012-1939
github.com/advisories/GHSA-g43v-55jg-34cf
access.redhat.com/errata/RHSA-2012:0710
bugzilla.redhat.com/show_bug.cgi?id=827829
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0710.json
cve.org/CVERecord?id=CVE-2011-3101