CVE-2012-3982
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0,...
9.3 HighFix available
CVE-2012-3982 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published October 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.73%, the 91st percentile. Fixed in iceweasel 3.5.16-19.
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploit likelihood
4.73%Down 1.9 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2012-3982- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2012-3982- Updated
- 2026-11-02
EUVDEUVD-2012-3926 No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2012-3926- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wqjw-25wv-2769 No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0,...
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-wqjw-25wv-2769- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
- mozilla firefox
- mozilla seamonkey
- mozilla thunderbird
- mozilla thunderbird esr
- canonical ubuntu linux
- debian linux
- redhat enterprise linux desktop
- redhat enterprise linux eus
- redhat enterprise linux server
- redhat enterprise linux workstation
- suse linux enterprise desktop
- suse linux enterprise sdk
Show 1 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:6.0 |
before 3.5.16-19, plus listed versions 3.5.16-103.5.16-10~bpo50+13.5.16-113.5.16-11~bpo50+13.5.16-12 Show 16 moreShow less3.5.16-133.5.16-143.5.16-153.5.16-163.5.16-173.5.16-183.5.16-43.5.16-53.5.16-5~bpo50+13.5.16-63.5.16-6~bpo50+13.5.16-73.5.16-7~bpo50+13.5.16-83.5.16-8~bpo50+13.5.16-9 |
3.5.16-19 |
icedoveDebian:6.0 |
before 3.0.11-1+squeeze14, plus listed versions 3.0.11-13.0.11-1+squeeze13.0.11-1+squeeze103.0.11-1+squeeze113.0.11-1+squeeze12 Show 9 moreShow less3.0.11-1+squeeze133.0.11-1+squeeze23.0.11-1+squeeze33.0.11-1+squeeze43.0.11-1+squeeze53.0.11-1+squeeze63.0.11-1+squeeze73.0.11-1+squeeze83.0.11-1+squeeze9 |
3.0.11-1+squeeze14 |
iceapeDebian:6.0 |
before 2.0.11-16, plus listed versions 2.0.11-102.0.11-112.0.11-122.0.11-132.0.11-14 Show 9 moreShow less2.0.11-152.0.11-22.0.11-32.0.11-42.0.11-52.0.11-62.0.11-72.0.11-82.0.11-9 |
2.0.11-16 |
firefoxRed Hat:enterprise_linux:5::client |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::client |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
Show 38 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:5::server |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::server |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::server |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::server |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
firefoxRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefoxRed Hat:enterprise_linux:6::computenode |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::computenode |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::computenode |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefoxRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefoxRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
thunderbirdRed Hat:enterprise_linux:5::client |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
thunderbirdRed Hat:rhel_productivity:5 |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 |
before 0:10.0.8-1.el5_8 | 0:10.0.8-1.el5_8 |
thunderbirdRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
thunderbirdRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
thunderbirdRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:10.0.8-1.el6_3 | 0:10.0.8-1.el6_3 |
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 45.5.1-1.1 | 45.5.1-1.1 |
firefox-esropenSUSE:Tumbleweed |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/50904
bugzilla.mozilla.org/show_bug.cgi?id=794025
debian.org/security/2012/dsa-2565
Show 194 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612
securityfocus.com/bid/55924
mozilla.org/security/announce/2012/mfsa2012-74.html
rhn.redhat.com/errata/RHSA-2012-1351.html
lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
mandriva.com/security/advisories?name=MDVSA-2012:163
ubuntu.com/usn/USN-1611-1
nvd.nist.gov/vuln/detail/CVE-2012-3982
github.com/advisories/GHSA-wqjw-25wv-2769
access.redhat.com/errata/RHSA-2012:1350
bugzilla.redhat.com/show_bug.cgi?id=851912
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1350.json
cve.org/CVERecord?id=CVE-2012-1956
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 2,008 references. The JSON record has them.