---
title: "CVE-2012-0464\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2012-0464?format=md
keywords: index, follow
---

# CVE-2012-0464

Publication date 14 March 2012

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Use-after-free vulnerability in the browser engine in Mozilla Firefox
before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3,
Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before
10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute
arbitrary code via vectors involving an empty argument to the array.join
function in conjunction with the triggering of garbage collection.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| firefox | 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 11.10 oneiric | Fixed 11.0+build1-0ubuntu0.11.10.1 |
| 11.04 natty | Fixed 11.0+build1-0ubuntu0.11.04.1 |
| 10.10 maverick | Fixed 11.0+build1-0ubuntu0.10.10.2 |
| 10.04 LTS lucid | Fixed 11.0+build1-0ubuntu0.10.04.2 |
| 8.04 LTS hardy | Ignored end of life |
| seamonkey | 13.10 saucy | Not in release |
| 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Ignored end of life |
| 11.04 natty | Ignored end of life |
| 10.10 maverick | Ignored end of life |
| 10.04 LTS lucid | Ignored end of life |
| 8.04 LTS hardy | Ignored end of life |
| thunderbird | 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 11.10 oneiric | Fixed 11.0+build1-0ubuntu0.11.10.1 |
| 11.04 natty | Fixed 3.1.20+build1+nobinonly-0ubuntu0.11.04.1 |
| 10.10 maverick | Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.10.1 |
| 10.04 LTS lucid | Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.04.1 |
| 8.04 LTS hardy | Ignored end of life |
| xulrunner-1.9.2 | 13.10 saucy | Not in release |
| 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not in release |
| 11.04 natty | Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.11.04.1 |
| 10.10 maverick | Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1 |
| 10.04 LTS lucid | Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1 |
| 8.04 LTS hardy | Ignored end of life |
| xulrunner-2.0 | 13.10 saucy | Not in release |
| 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not in release |
| 11.04 natty | Ignored end of life |
| 10.10 maverick | Not in release |
| 10.04 LTS lucid | Not in release |
| 8.04 LTS hardy | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0464)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2012-0464)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2012-0464)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2012-0464)

### Related Ubuntu Security Notices (USN)

+ [USN-1401-2](https://usn.ubuntu.com/USN-1401-2)
+ Thunderbird vulnerabilities
+ 23 March 2012

+ [USN-1401-1](https://usn.ubuntu.com/USN-1401-1)
+ Xulrunner vulnerabilities
+ 19 March 2012

+ [USN-1400-1](https://usn.ubuntu.com/USN-1400-1)
+ Firefox vulnerabilities
+ 16 March 2012

+ [USN-1400-3](https://usn.ubuntu.com/USN-1400-3)
+ Thunderbird vulnerabilities
+ 21 March 2012

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2012-0464>