CVE-2012-3105
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0,...
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.
Exploit likelihood
What each source reports
NVD Score used
9.3
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.
- Record
CVE-2012-3105- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.
- Record
CVE-2012-3105- Updated
- 2026-11-02
EUVDEUVD-2012-3083 No score
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.
- Record
EUVD-2012-3083- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7p2c-gjhf-hwwv No score
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0,...
The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not properly mitigate an unspecified flaw in an NVIDIA driver, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a related issue to CVE-2011-3101.
- Record
GHSA-7p2c-gjhf-hwwv- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el5_8 | 0:10.0.5-1.el5_8 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunnerRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
xulrunner-develRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-1.el6_2 | 0:10.0.5-1.el6_2 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 11 CVEs |
before 0:10.0.5-2.el5_8 | 0:10.0.5-2.el5_8 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:10.0.5-2.el6_2 | 0:10.0.5-2.el6_2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3105 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published June 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.62%, the 89th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16912
mozilla.org/security/announce/2012/mfsa2012-34.html
bugzilla.mozilla.org/show_bug.cgi?id=744888
nvd.nist.gov/vuln/detail/CVE-2012-3105
github.com/advisories/GHSA-7p2c-gjhf-hwwv
access.redhat.com/errata/RHSA-2012:0710
Show 42 moreShow less
access.redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefoxESR.html
bugzilla.redhat.com/show_bug.cgi?id=827829
bugzilla.redhat.com/show_bug.cgi?id=827830
bugzilla.redhat.com/show_bug.cgi?id=827831
bugzilla.redhat.com/show_bug.cgi?id=827832
bugzilla.redhat.com/show_bug.cgi?id=827843
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0710.json
access.redhat.com/security/cve/CVE-2011-3101
cve.org/CVERecord?id=CVE-2011-3101
nvd.nist.gov/vuln/detail/CVE-2011-3101
access.redhat.com/security/cve/CVE-2012-1937
cve.org/CVERecord?id=CVE-2012-1937
nvd.nist.gov/vuln/detail/CVE-2012-1937
access.redhat.com/security/cve/CVE-2012-1938
cve.org/CVERecord?id=CVE-2012-1938
nvd.nist.gov/vuln/detail/CVE-2012-1938
access.redhat.com/security/cve/CVE-2012-1939
cve.org/CVERecord?id=CVE-2012-1939
nvd.nist.gov/vuln/detail/CVE-2012-1939
access.redhat.com/security/cve/CVE-2012-1940
cve.org/CVERecord?id=CVE-2012-1940
nvd.nist.gov/vuln/detail/CVE-2012-1940
access.redhat.com/security/cve/CVE-2012-1941
cve.org/CVERecord?id=CVE-2012-1941
nvd.nist.gov/vuln/detail/CVE-2012-1941
access.redhat.com/security/cve/CVE-2012-1944
cve.org/CVERecord?id=CVE-2012-1944
nvd.nist.gov/vuln/detail/CVE-2012-1944
access.redhat.com/security/cve/CVE-2012-1945
cve.org/CVERecord?id=CVE-2012-1945
nvd.nist.gov/vuln/detail/CVE-2012-1945
access.redhat.com/security/cve/CVE-2012-1946
cve.org/CVERecord?id=CVE-2012-1946
nvd.nist.gov/vuln/detail/CVE-2012-1946
access.redhat.com/security/cve/CVE-2012-1947
cve.org/CVERecord?id=CVE-2012-1947
nvd.nist.gov/vuln/detail/CVE-2012-1947
access.redhat.com/security/cve/CVE-2012-3105
cve.org/CVERecord?id=CVE-2012-3105
access.redhat.com/errata/RHSA-2012:0715
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0715.json