Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2012-3971

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。使用在Mozilla Firefox 15.0之前版本、Thunderbird 15.0之前版本、SeaMonkey 2.12之前版本中的Summer Institute of Linguistics (SIL) Graphite 2中存在漏洞。远程攻击者可利用该漏洞通过与(1)Silf::readClassMap和(2)Pass::readPass函数相关的向量，执行任意代码或导致拒绝服务（内存破坏）。

AI Predicted 9.8 Difficulty: Easy EPSS 5.24% · P92 Updated Feb 21, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2012-3971

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mozilla Firefox/Thunderbird/SeaMonkey 缓冲区溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2012-3971

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2012-3971

请登录查看更多情报信息。

Vendor Advisories for CVE-2012-3971 (7)

🔗 https://bugzilla.mozilla.org/show_bug.cgi?id=753623 x_refsource_CONFIRM
🔗 https://bugzilla.mozilla.org/show_bug.cgi?id=753230 x_refsource_CONFIRM
🔗 http://www.mozilla.org/security/announce/2012/mfsa2012-64.html x_refsource_CONFIRM
🔗 http://www.securityfocus.com/bid/55304 vdb-entry x_refsource_BID
🔗 http://www.ubuntu.com/usn/USN-1548-2 vendor-advisory x_refsource_UBUNTU
🔗 http://www.ubuntu.com/usn/USN-1548-1 vendor-advisory x_refsource_UBUNTU
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062 vdb-entry signature x_refsource_OVAL

Mailing List Discussions for CVE-2012-3971 (3)

🔗 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html vendor-advisory x_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html vendor-advisory x_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html vendor-advisory x_refsource_SUSE

https://www.cve.org/CVERecord?id=CVE-2012-3971

Same Patch Batch · n/a · 2012-08-29 · 47 CVEs total

CVE-2012-3969		Mozilla Firefox/Thunderbird/SeaMonkey 数字错误漏洞
CVE-2012-3973		Mozilla Firefox 权限许可和访问控制漏洞
CVE-2012-3975		Mozilla Firefox/Thunderbird/SeaMonkey 信息泄露漏洞
CVE-2012-3979		Mozilla Firefox ‘__android_log_print’函数任意代码执行漏洞
CVE-2012-3980		Mozilla Firefox/Thunderbird/SeaMonkey 代码注入漏洞
CVE-2011-4918		Elxis CMS跨站脚本漏洞
CVE-2011-4926		WordPress Adminimize插件 ‘page’参数跨站脚本漏洞
CVE-2011-5128		WordPress Adminimize插件多个跨站脚本漏洞
CVE-2012-3978		Mozilla Firefox/Thunderbird/SeaMonkey 权限许可和访问控制漏洞
CVE-2012-3970		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞
CVE-2012-3972		Mozilla Firefox/Thunderbird/SeaMonkey 信息泄露洞
CVE-2012-3968		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞
CVE-2012-3967		Mozilla Firefox/Thunderbird/SeaMonkey 设计错误漏洞
CVE-2012-3966		Mozilla Firefox/Thunderbird/SeaMonkey 缓冲区溢出漏洞
CVE-2012-3965		Mozilla Firefox 权限许可和访问控制漏洞
CVE-2012-3964		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞
CVE-2012-3963		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞
CVE-2012-3962		Mozilla Firefox/Thunderbird/SeaMonkey 设计错误漏洞
CVE-2012-3961		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞
CVE-2012-3960		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2012-3971

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2012-3971

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2012-3971

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2012-3971

III. Intelligence Information for CVE-2012-3971

Vendor Advisories for CVE-2012-3971 (7)

Mailing List Discussions for CVE-2012-3971 (3)

Same Patch Batch · n/a · 2012-08-29 · 47 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2012-3971

Leave a comment