Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4khp-3yca-efa6
Vulnerability ID VCID-4khp-3yca-efa6
Aliases CVE-2012-4179
Summary Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team discovered a series of use-after-free, buffer overflow, and out of bounds read issues using the Address Sanitizer tool in shipped software. These issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting two additional use-after-free flaws introduced during Firefox 16 development and fixed before general release. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
epss 0.06071 https://api.first.org/data/v1/epss?cve=CVE-2012-4179
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2012-85
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4179.json
https://api.first.org/data/v1/epss?cve=CVE-2012-4179
863625 https://bugzilla.redhat.com/show_bug.cgi?id=863625
CVE-2012-4179 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4179
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2012-85 https://www.mozilla.org/en-US/security/advisories/mfsa2012-85
RHSA-2012:1350 https://access.redhat.com/errata/RHSA-2012:1350
RHSA-2012:1351 https://access.redhat.com/errata/RHSA-2012:1351
USN-1600-1 https://usn.ubuntu.com/1600-1/
USN-1611-1 https://usn.ubuntu.com/1611-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.90885
EPSS Score 0.06071
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:20.752240+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-85.md 38.6.0