CVE-2012-5840
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox...
9.3 HighFix available
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
Exploit likelihood
6.07%Down 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
- Record
CVE-2012-5840- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
- Record
CVE-2012-5840- Updated
- 2026-11-02
EUVDEUVD-2012-5718 No score
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
- Record
EUVD-2012-5718- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3355-xw7j-q4q7 No score
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox...
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
- Record
GHSA-3355-xw7j-q4q7- Weakness
- CWE-416
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
Affected products
- mozilla firefox
- mozilla seamonkey
- mozilla thunderbird
- mozilla thunderbird esr
- canonical ubuntu linux
- opensuse
- redhat enterprise linux desktop
- redhat enterprise linux eus
- redhat enterprise linux server
- redhat enterprise linux workstation
- suse linux enterprise desktop
- suse linux enterprise server
Show 1 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:5::client |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::client |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
firefoxRed Hat:enterprise_linux:5::server |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
firefox-debuginfoRed Hat:enterprise_linux:5::server |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunnerRed Hat:enterprise_linux:5::server |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
Show 34 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::server |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
xulrunner-develRed Hat:enterprise_linux:5::server |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
firefoxRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefoxRed Hat:enterprise_linux:6::computenode |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::computenode |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::computenode |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefoxRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefoxRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunnerRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
xulrunner-develRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
thunderbirdRed Hat:enterprise_linux:5::client |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
thunderbirdRed Hat:rhel_productivity:5 |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 |
before 0:10.0.11-1.el5_8 | 0:10.0.11-1.el5_8 |
thunderbirdRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
thunderbirdRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
thunderbirdRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:10.0.11-1.el6_3 | 0:10.0.11-1.el6_3 |
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 45.5.1-1.1 | 45.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5840 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published November 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.07%, the 93rd percentile. Fixed in firefox 0:10.0.11-1.el5_8.
References
ubuntu.com/usn/USN-1638-3
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16904
secunia.com/advisories/51370
osvdb.org/87606
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2012-1483.html
exchange.xforce.ibmcloud.com/vulnerabilities/80190
palemoon.org/releasenotes-ng.shtml
mandriva.com/security/advisories?name=MDVSA-2012:173
bugzilla.mozilla.org/show_bug.cgi?id=805287
securityfocus.com/bid/56635
mozilla.org/security/announce/2012/mfsa2012-105.html
nvd.nist.gov/vuln/detail/CVE-2012-5840
github.com/advisories/GHSA-3355-xw7j-q4q7
access.redhat.com/errata/RHSA-2012:1482
bugzilla.redhat.com/show_bug.cgi?id=877614
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1482.json
cve.org/CVERecord?id=CVE-2012-4201
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 842 references. The JSON record has them.