--- title: "CVE-2012-0463\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2012-0463?format=md keywords: index, follow --- # CVE-2012-0463 Publication date 14 March 2012 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android. [Read the notes from the security team](https://ubuntu.com/security/CVE-2012-0463?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | firefox | 13.10 saucy | Not affected | | 13.04 raring | Not affected | | 12.10 quantal | Not affected | | 12.04 LTS precise | Not affected | | 11.10 oneiric | Fixed 11.0+build1-0ubuntu0.11.10.1 | | 11.04 natty | Fixed 11.0+build1-0ubuntu0.11.04.1 | | 10.10 maverick | Ignored end of life | | 10.04 LTS lucid | Fixed 11.0+build1-0ubuntu0.10.04.2 | | 8.04 LTS hardy | Ignored end of life | | seamonkey | 13.10 saucy | Not in release | | 13.04 raring | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 11.10 oneiric | Ignored end of life | | 11.04 natty | Ignored end of life | | 10.10 maverick | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | 8.04 LTS hardy | Ignored end of life | | thunderbird | 13.10 saucy | Not affected | | 13.04 raring | Not affected | | 12.10 quantal | Not affected | | 12.04 LTS precise | Not affected | | 11.10 oneiric | Not affected | | 11.04 natty | Not affected | | 10.10 maverick | Ignored end of life | | 10.04 LTS lucid | Not affected | | 8.04 LTS hardy | Ignored end of life | | xulrunner-1.9.2 | 13.10 saucy | Not in release | | 13.04 raring | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 11.10 oneiric | Not in release | | 11.04 natty | Ignored end of life | | 10.10 maverick | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | 8.04 LTS hardy | Ignored end of life | | xulrunner-2.0 | 13.10 saucy | Not in release | | 13.04 raring | Not in release | | 12.10 quantal | Not in release | | 12.04 LTS precise | Not in release | | 11.10 oneiric | Not in release | | 11.04 natty | Ignored end of life | | 10.10 maverick | Not in release | | 10.04 LTS lucid | Not in release | | 8.04 LTS hardy | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [sbeattie](https://launchpad.net/~sbeattie) possibly only affects android versions ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0463) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2012-0463) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2012-0463) * [Debian](https://security-tracker.debian.org/tracker/CVE-2012-0463) ### Other references *