csaf_redhat - rhsa-2012

rhsa-2012_0388

Vulnerability from csaf_redhat

Published

2012-03-14 07:17

Modified

2024-11-22 05:07

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0461, CVE-2012-0462, CVE-2012-0464) Two flaws were found in the way Thunderbird parsed certain Scalable Vector Graphics (SVG) image files. An HTML mail message containing a malicious SVG image file could cause an information leak, or cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0456, CVE-2012-0457) A flaw could allow malicious content to bypass intended restrictions, possibly leading to a cross-site scripting (XSS) attack if a user were tricked into dropping a "javascript:" link onto a frame. (CVE-2012-0455) It was found that the home page could be set to a "javascript:" link. If a user were tricked into setting such a home page by dragging a link to the home button, it could cause Firefox to repeatedly crash, eventually leading to arbitrary code execution with the privileges of the user running Firefox. A similar flaw was found and fixed in Thunderbird. (CVE-2012-0458) A flaw was found in the way Thunderbird parsed certain, remote content containing "cssText". Malicious, remote content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0459) It was found that by using the DOM fullscreen API, untrusted content could bypass the mozRequestFullscreen security protections. Malicious content could exploit this API flaw to cause user interface spoofing. (CVE-2012-0460) A flaw was found in the way Thunderbird handled content with multiple Content Security Policy (CSP) headers. This could lead to a cross-site scripting attack if used in conjunction with a website that has a header injection flaw. (CVE-2012-0451) Note: All issues except CVE-2012-0456 and CVE-2012-0457 cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 10.0.3 ESR, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes multiple security issues is now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed content. Malicious\ncontent could cause Thunderbird to crash or, potentially, execute arbitrary\ncode with the privileges of the user running Thunderbird. (CVE-2012-0461,\nCVE-2012-0462, CVE-2012-0464)\n\nTwo flaws were found in the way Thunderbird parsed certain Scalable Vector\nGraphics (SVG) image files. An HTML mail message containing a malicious SVG\nimage file could cause an information leak, or cause Thunderbird to crash\nor, potentially, execute arbitrary code with the privileges of the user\nrunning Thunderbird. (CVE-2012-0456, CVE-2012-0457)\n\nA flaw could allow malicious content to bypass intended restrictions,\npossibly leading to a cross-site scripting (XSS) attack if a user were\ntricked into dropping a \"javascript:\" link onto a frame. (CVE-2012-0455)\n\nIt was found that the home page could be set to a \"javascript:\" link. If a\nuser were tricked into setting such a home page by dragging a link to the\nhome button, it could cause Firefox to repeatedly crash, eventually leading\nto arbitrary code execution with the privileges of the user running\nFirefox. A similar flaw was found and fixed in Thunderbird. (CVE-2012-0458)\n\nA flaw was found in the way Thunderbird parsed certain, remote content\ncontaining \"cssText\". Malicious, remote content could cause Thunderbird to\ncrash or, potentially, execute arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2012-0459)\n\nIt was found that by using the DOM fullscreen API, untrusted content could\nbypass the mozRequestFullscreen security protections. Malicious content\ncould exploit this API flaw to cause user interface spoofing.\n(CVE-2012-0460)\n\nA flaw was found in the way Thunderbird handled content with multiple\nContent Security Policy (CSP) headers. This could lead to a cross-site\nscripting attack if used in conjunction with a website that has a header\ninjection flaw. (CVE-2012-0451)\n\nNote: All issues except CVE-2012-0456 and CVE-2012-0457 cannot be exploited\nby a specially-crafted HTML mail message as JavaScript is disabled by\ndefault for mail messages. It could be exploited another way in\nThunderbird, for example, when viewing the full remote content of an RSS\nfeed.\n\nAll Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.3 ESR, which corrects these issues. After\ninstalling the update, Thunderbird must be restarted for the changes to\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2012:0388",
        "url": "https://access.redhat.com/errata/RHSA-2012:0388"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "803109",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803109"
      },
      {
        "category": "external",
        "summary": "803111",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803111"
      },
      {
        "category": "external",
        "summary": "803112",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803112"
      },
      {
        "category": "external",
        "summary": "803113",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803113"
      },
      {
        "category": "external",
        "summary": "803114",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803114"
      },
      {
        "category": "external",
        "summary": "803116",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803116"
      },
      {
        "category": "external",
        "summary": "803119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803119"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0388.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T05:07:43+00:00",
      "generator": {
        "date": "2024-11-22T05:07:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2012:0388",
      "initial_release_date": "2012-03-14T07:17:00+00:00",
      "revision_history": [
        {
          "date": "2012-03-14T07:17:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2012-03-14T07:19:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T05:07:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEL Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "RHEL Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS-5.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.2.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.2.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.2.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el5_8.src",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el5_8.src",
                  "product_id": "thunderbird-0:10.0.3-1.el5_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el5_8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el6_2.src",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el6_2.src",
                  "product_id": "thunderbird-0:10.0.3-1.el6_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el6_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el5_8.i386",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el5_8.i386",
                  "product_id": "thunderbird-0:10.0.3-1.el5_8.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el5_8?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
                  "product_id": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.3-1.el5_8?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el5_8.x86_64",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el5_8.x86_64",
                  "product_id": "thunderbird-0:10.0.3-1.el5_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el5_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
                  "product_id": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.3-1.el5_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
                  "product_id": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.3-1.el6_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el6_2.x86_64",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el6_2.x86_64",
                  "product_id": "thunderbird-0:10.0.3-1.el6_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el6_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
                  "product_id": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.3-1.el6_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el6_2.i686",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el6_2.i686",
                  "product_id": "thunderbird-0:10.0.3-1.el6_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el6_2?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
                  "product_id": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.3-1.el6_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el6_2.s390x",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el6_2.s390x",
                  "product_id": "thunderbird-0:10.0.3-1.el6_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el6_2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
                  "product_id": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.3-1.el6_2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.3-1.el6_2.ppc64",
                "product": {
                  "name": "thunderbird-0:10.0.3-1.el6_2.ppc64",
                  "product_id": "thunderbird-0:10.0.3-1.el6_2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.3-1.el6_2?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el5_8.i386",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el5_8.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el5_8.src",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el5_8.x86_64",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el5_8.i386",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el5_8.src as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el5_8.src",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el5_8.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.i686",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.ppc64",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.s390x",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.src",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.x86_64",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
        "relates_to_product_reference": "6Client-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.i686",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.ppc64",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.s390x",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.src",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.x86_64",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
        "relates_to_product_reference": "6Server-optional-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.i686",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.ppc64",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.s390x",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.src",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.3-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.3-1.el6_2.x86_64",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
        "relates_to_product_reference": "6Workstation-6.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
        "relates_to_product_reference": "6Workstation-6.2.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2012-0451",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2012-03-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: XSS with multiple Content Security Policy headers (MFSA 2012-15)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0451"
        },
        {
          "category": "external",
          "summary": "RHBZ#803114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0451",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0451"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0451",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0451"
        }
      ],
      "release_date": "2012-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: XSS with multiple Content Security Policy headers (MFSA 2012-15)"
    },
    {
      "cve": "CVE-2012-0455",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a \"DragAndDropJacking\" issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: XSS with Drag and Drop and Javascript: URL (MFSA 2012-13)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0455"
        },
        {
          "category": "external",
          "summary": "RHBZ#803119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0455",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0455"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0455",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0455"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: XSS with Drag and Drop and Javascript: URL (MFSA 2012-13)"
    },
    {
      "cve": "CVE-2012-0456",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803116"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: SVG issues found with Address Sanitizer (MFSA 2012-14)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0456"
        },
        {
          "category": "external",
          "summary": "RHBZ#803116",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803116"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0456",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0456"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0456",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0456"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: SVG issues found with Address Sanitizer (MFSA 2012-14)"
    },
    {
      "cve": "CVE-2012-0457",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803116"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: SVG issues found with Address Sanitizer (MFSA 2012-14)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0457"
        },
        {
          "category": "external",
          "summary": "RHBZ#803116",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803116"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0457",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0457"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0457",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0457"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: SVG issues found with Address Sanitizer (MFSA 2012-14)"
    },
    {
      "cve": "CVE-2012-0458",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Escalation of privilege with Javascript: URL as home page (MFSA 2012-16)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0458"
        },
        {
          "category": "external",
          "summary": "RHBZ#803113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0458",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0458"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0458",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0458"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Escalation of privilege with Javascript: URL as home page (MFSA 2012-16)"
    },
    {
      "cve": "CVE-2012-0459",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803112"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Crash when accessing keyframe cssText after dynamic modification (MFSA 2012-17)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0459"
        },
        {
          "category": "external",
          "summary": "RHBZ#803112",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803112"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0459",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0459"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0459",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0459"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Crash when accessing keyframe cssText after dynamic modification (MFSA 2012-17)"
    },
    {
      "cve": "CVE-2012-0460",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: window.fullScreen writeable by untrusted content (MFSA 2012-18)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0460"
        },
        {
          "category": "external",
          "summary": "RHBZ#803111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0460",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0460"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0460",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0460"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: window.fullScreen writeable by untrusted content (MFSA 2012-18)"
    },
    {
      "cve": "CVE-2012-0461",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0461"
        },
        {
          "category": "external",
          "summary": "RHBZ#803109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0461",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0461"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0461",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0461"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)"
    },
    {
      "cve": "CVE-2012-0462",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0462"
        },
        {
          "category": "external",
          "summary": "RHBZ#803109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0462"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)"
    },
    {
      "cve": "CVE-2012-0464",
      "discovery_date": "2012-03-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "803109"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
          "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
          "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-0464"
        },
        {
          "category": "external",
          "summary": "RHBZ#803109",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=803109"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-0464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-0464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0464"
        }
      ],
      "release_date": "2012-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-03-14T07:17:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0388"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.3-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.3-1.el5_8.x86_64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Client-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Client-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Server-optional-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.src",
            "6Workstation-6.2.z:thunderbird-0:10.0.3-1.el6_2.x86_64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.i686",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.ppc64",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.s390x",
            "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.3-1.el6_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)"
    }
  ]
}

cve-2012-0464

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.

References

▼	URL	Tags
	http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757	x_refsource_MISC
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=735104	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	vendor-advisory, x_refsource_MANDRIVA
	http://pwn2own.zerodayinitiative.com/status.html	x_refsource_MISC
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48414	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48823	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1401-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663	x_refsource_MISC
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=720079	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2012/mfsa2012-19.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/52465	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48495	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:30.994Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757"
          },
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=735104"
          },
          {
            "name": "MDVSA-2012:031",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://pwn2own.zerodayinitiative.com/status.html"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48414"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "48823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48823"
          },
          {
            "name": "USN-1401-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1401-1"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720079"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "name": "oval:org.mitre.oval:def:14170",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "52465",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52465"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48495"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757"
        },
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=735104"
        },
        {
          "name": "MDVSA-2012:031",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://pwn2own.zerodayinitiative.com/status.html"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48414"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "48823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48823"
        },
        {
          "name": "USN-1401-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1401-1"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720079"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "name": "oval:org.mitre.oval:def:14170",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "52465",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52465"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48495"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0464",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757",
              "refsource": "MISC",
              "url": "http://www.zdnet.com/blog/security/mozilla-knew-of-pwn2own-bug-before-cansecwest/10757"
            },
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=735104",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=735104"
            },
            {
              "name": "MDVSA-2012:031",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
            },
            {
              "name": "http://pwn2own.zerodayinitiative.com/status.html",
              "refsource": "MISC",
              "url": "http://pwn2own.zerodayinitiative.com/status.html"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48414"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "48823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48823"
            },
            {
              "name": "USN-1401-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1401-1"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663",
              "refsource": "MISC",
              "url": "http://www.zdnet.com/blog/security/researchers-hack-into-newest-firefox-with-zero-day-flaw/10663"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=720079",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720079"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "oval:org.mitre.oval:def:14170",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14170"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "52465",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/52465"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48495"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0464",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:30.994Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0461

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48414	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48823	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1401-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=730425	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2012/mfsa2012-19.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2458	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/48920	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=657588	x_refsource_CONFIRM
	http://www.debian.org/security/2012/dsa-2433	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48495	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15009	vdb-entry, signature, x_refsource_OVAL
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.034Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "MDVSA-2012:031",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48414"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "48823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48823"
          },
          {
            "name": "USN-1401-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1401-1"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=730425"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "DSA-2458",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2458"
          },
          {
            "name": "48920",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48920"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=657588"
          },
          {
            "name": "DSA-2433",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2433"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48495"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "oval:org.mitre.oval:def:15009",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15009"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "MDVSA-2012:031",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48414"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "48823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48823"
        },
        {
          "name": "USN-1401-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1401-1"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=730425"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "DSA-2458",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2458"
        },
        {
          "name": "48920",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48920"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=657588"
        },
        {
          "name": "DSA-2433",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2433"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48495"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "oval:org.mitre.oval:def:15009",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15009"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0461",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "MDVSA-2012:031",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48414"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "48823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48823"
            },
            {
              "name": "USN-1401-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1401-1"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=730425",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=730425"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "DSA-2458",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2458"
            },
            {
              "name": "48920",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48920"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=657588",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=657588"
            },
            {
              "name": "DSA-2433",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2433"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48495"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "oval:org.mitre.oval:def:15009",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15009"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0461",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0455

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=704354	x_refsource_CONFIRM
	http://secunia.com/advisories/48414	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48823	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1401-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-13.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/52458	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2458	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/48920	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14829	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2012/dsa-2433	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48495	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:30.984Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "MDVSA-2012:031",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=704354"
          },
          {
            "name": "48414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48414"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "48823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48823"
          },
          {
            "name": "USN-1401-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1401-1"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-13.html"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "52458",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52458"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "DSA-2458",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2458"
          },
          {
            "name": "48920",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48920"
          },
          {
            "name": "oval:org.mitre.oval:def:14829",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14829"
          },
          {
            "name": "DSA-2433",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2433"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48495"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a \"DragAndDropJacking\" issue."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "MDVSA-2012:031",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=704354"
        },
        {
          "name": "48414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48414"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "48823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48823"
        },
        {
          "name": "USN-1401-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1401-1"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-13.html"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "52458",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52458"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "DSA-2458",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2458"
        },
        {
          "name": "48920",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48920"
        },
        {
          "name": "oval:org.mitre.oval:def:14829",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14829"
        },
        {
          "name": "DSA-2433",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2433"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48495"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0455",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a \"DragAndDropJacking\" issue."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "MDVSA-2012:031",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=704354",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=704354"
            },
            {
              "name": "48414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48414"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "48823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48823"
            },
            {
              "name": "USN-1401-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1401-1"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-13.html"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "52458",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/52458"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "DSA-2458",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2458"
            },
            {
              "name": "48920",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48920"
            },
            {
              "name": "oval:org.mitre.oval:def:14829",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14829"
            },
            {
              "name": "DSA-2433",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2433"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48495"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0455",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:30.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0458

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2012/mfsa2012-16.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/52460	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/48414	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48823	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1401-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=723808	x_refsource_CONFIRM
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15122	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=718203	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=719994	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2458	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/48920	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2433	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48495	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.026Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-16.html"
          },
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "MDVSA-2012:031",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "52460",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52460"
          },
          {
            "name": "48414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48414"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "48823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48823"
          },
          {
            "name": "USN-1401-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1401-1"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=723808"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "name": "oval:org.mitre.oval:def:15122",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15122"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718203"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=719994"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "DSA-2458",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2458"
          },
          {
            "name": "48920",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48920"
          },
          {
            "name": "DSA-2433",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2433"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48495"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-16.html"
        },
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "MDVSA-2012:031",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "52460",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52460"
        },
        {
          "name": "48414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48414"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "48823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48823"
        },
        {
          "name": "USN-1401-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1401-1"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=723808"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "name": "oval:org.mitre.oval:def:15122",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15122"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718203"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=719994"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "DSA-2458",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2458"
        },
        {
          "name": "48920",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48920"
        },
        {
          "name": "DSA-2433",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2433"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48495"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0458",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-16.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-16.html"
            },
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "MDVSA-2012:031",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "52460",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/52460"
            },
            {
              "name": "48414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48414"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "48823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48823"
            },
            {
              "name": "USN-1401-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1401-1"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=723808",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=723808"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "oval:org.mitre.oval:def:15122",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15122"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=718203",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718203"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=719994",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=719994"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "DSA-2458",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2458"
            },
            {
              "name": "48920",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48920"
            },
            {
              "name": "DSA-2433",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2433"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48495"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0458",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.026Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0460

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-18.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49055	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=727303	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.056Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-18.html"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "oval:org.mitre.oval:def:15114",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114"
          },
          {
            "name": "49055",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49055"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=727303"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-18.html"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "oval:org.mitre.oval:def:15114",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114"
        },
        {
          "name": "49055",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49055"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=727303"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0460",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-18.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-18.html"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "oval:org.mitre.oval:def:15114",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114"
            },
            {
              "name": "49055",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49055"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=727303",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=727303"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0460",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.056Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0457

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=720103	x_refsource_CONFIRM
	http://secunia.com/advisories/48414	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48823	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1401-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2012/mfsa2012-14.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48495	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.006Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "MDVSA-2012:031",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "oval:org.mitre.oval:def:14775",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720103"
          },
          {
            "name": "48414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48414"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "48823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48823"
          },
          {
            "name": "USN-1401-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1401-1"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48495"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "MDVSA-2012:031",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "oval:org.mitre.oval:def:14775",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720103"
        },
        {
          "name": "48414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48414"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "48823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48823"
        },
        {
          "name": "USN-1401-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1401-1"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48495"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0457",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "MDVSA-2012:031",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "oval:org.mitre.oval:def:14775",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=720103",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720103"
            },
            {
              "name": "48414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48414"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "48823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48823"
            },
            {
              "name": "USN-1401-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1401-1"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48495"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0457",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.006Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0456

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:031	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48414	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48823	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1401-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2012/mfsa2012-14.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2458	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/48920	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2012/dsa-2433	vendor-advisory, x_refsource_DEBIAN
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48495	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=711653	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.011Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "MDVSA-2012:031",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48414",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48414"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "48823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48823"
          },
          {
            "name": "USN-1401-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1401-1"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "DSA-2458",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2458"
          },
          {
            "name": "48920",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48920"
          },
          {
            "name": "oval:org.mitre.oval:def:15007",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007"
          },
          {
            "name": "DSA-2433",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2433"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48495",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48495"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=711653"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "MDVSA-2012:031",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48414",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48414"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "48823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48823"
        },
        {
          "name": "USN-1401-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1401-1"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "DSA-2458",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2458"
        },
        {
          "name": "48920",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48920"
        },
        {
          "name": "oval:org.mitre.oval:def:15007",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007"
        },
        {
          "name": "DSA-2433",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2433"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48495",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48495"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=711653"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "MDVSA-2012:031",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:031"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48414",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48414"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "48823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48823"
            },
            {
              "name": "USN-1401-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1401-1"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-14.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "DSA-2458",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2458"
            },
            {
              "name": "48920",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48920"
            },
            {
              "name": "oval:org.mitre.oval:def:15007",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007"
            },
            {
              "name": "DSA-2433",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2433"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48495",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48495"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=711653",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=711653"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0456",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.011Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0462

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48624	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=714590	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=718516	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=705855	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=699033	x_refsource_CONFIRM
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=727330	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=720380	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2012/mfsa2012-19.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15012	vdb-entry, signature, x_refsource_OVAL
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=701269	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=718202	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=712572	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.041Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "48624",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48624"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=714590"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718516"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=705855"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=699033"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "SUSE-SU-2012:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=727330"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720380"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "oval:org.mitre.oval:def:15012",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15012"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=701269"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718202"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=712572"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "48624",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48624"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=714590"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718516"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=705855"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=699033"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "SUSE-SU-2012:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=727330"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720380"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "oval:org.mitre.oval:def:15012",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15012"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=701269"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718202"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=712572"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0462",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "48624",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48624"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=714590",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=714590"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=718516",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718516"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=705855",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=705855"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=699033",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=699033"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "SUSE-SU-2012:0425",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=727330",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=727330"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=720380",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=720380"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-19.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "oval:org.mitre.oval:def:15012",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15012"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=701269",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=701269"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=718202",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=718202"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=712572",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=712572"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0462",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0459

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=723446	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49055	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-17.html	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:31.010Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=723446"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "oval:org.mitre.oval:def:15066",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066"
          },
          {
            "name": "49055",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49055"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-17.html"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=723446"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "oval:org.mitre.oval:def:15066",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066"
        },
        {
          "name": "49055",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49055"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-17.html"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0459",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=723446",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=723446"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "oval:org.mitre.oval:def:15066",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066"
            },
            {
              "name": "49055",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49055"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-17.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-17.html"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0459",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:31.010Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-0451

Vulnerability from cvelistv5

Published

2012-03-14 19:00

Modified

2024-08-06 18:23

Severity ?

Summary

CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/48402	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=717511	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1400-5	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48359	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-4	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48629	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-3	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2012-0387.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/48496	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49055	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14909	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2012/mfsa2012-15.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1400-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/52463	vdb-entry, x_refsource_BID
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:032	vendor-advisory, x_refsource_MANDRIVA
	http://www.securitytracker.com/id?1026803	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48553	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1400-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/48561	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-0388.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id?1026801	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id?1026804	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/48513	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:23:30.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2012:0417",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
          },
          {
            "name": "48402",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48402"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=717511"
          },
          {
            "name": "SUSE-SU-2012:0424",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
          },
          {
            "name": "USN-1400-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-5"
          },
          {
            "name": "48359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48359"
          },
          {
            "name": "USN-1400-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-4"
          },
          {
            "name": "48629",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48629"
          },
          {
            "name": "USN-1400-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-3"
          },
          {
            "name": "RHSA-2012:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
          },
          {
            "name": "48496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48496"
          },
          {
            "name": "49055",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49055"
          },
          {
            "name": "oval:org.mitre.oval:def:14909",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14909"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-15.html"
          },
          {
            "name": "USN-1400-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-2"
          },
          {
            "name": "52463",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/52463"
          },
          {
            "name": "MDVSA-2012:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
          },
          {
            "name": "1026803",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026803"
          },
          {
            "name": "48553",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48553"
          },
          {
            "name": "USN-1400-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1400-1"
          },
          {
            "name": "48561",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48561"
          },
          {
            "name": "RHSA-2012:0388",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
          },
          {
            "name": "1026801",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026801"
          },
          {
            "name": "1026804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026804"
          },
          {
            "name": "48513",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48513"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-17T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2012:0417",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
        },
        {
          "name": "48402",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48402"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=717511"
        },
        {
          "name": "SUSE-SU-2012:0424",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
        },
        {
          "name": "USN-1400-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-5"
        },
        {
          "name": "48359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48359"
        },
        {
          "name": "USN-1400-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-4"
        },
        {
          "name": "48629",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48629"
        },
        {
          "name": "USN-1400-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-3"
        },
        {
          "name": "RHSA-2012:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
        },
        {
          "name": "48496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48496"
        },
        {
          "name": "49055",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49055"
        },
        {
          "name": "oval:org.mitre.oval:def:14909",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14909"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-15.html"
        },
        {
          "name": "USN-1400-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-2"
        },
        {
          "name": "52463",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/52463"
        },
        {
          "name": "MDVSA-2012:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
        },
        {
          "name": "1026803",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026803"
        },
        {
          "name": "48553",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48553"
        },
        {
          "name": "USN-1400-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1400-1"
        },
        {
          "name": "48561",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48561"
        },
        {
          "name": "RHSA-2012:0388",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
        },
        {
          "name": "1026801",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026801"
        },
        {
          "name": "1026804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026804"
        },
        {
          "name": "48513",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48513"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-0451",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2012:0417",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html"
            },
            {
              "name": "48402",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48402"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=717511",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=717511"
            },
            {
              "name": "SUSE-SU-2012:0424",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html"
            },
            {
              "name": "USN-1400-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-5"
            },
            {
              "name": "48359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48359"
            },
            {
              "name": "USN-1400-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-4"
            },
            {
              "name": "48629",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48629"
            },
            {
              "name": "USN-1400-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-3"
            },
            {
              "name": "RHSA-2012:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0387.html"
            },
            {
              "name": "48496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48496"
            },
            {
              "name": "49055",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49055"
            },
            {
              "name": "oval:org.mitre.oval:def:14909",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14909"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-15.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-15.html"
            },
            {
              "name": "USN-1400-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-2"
            },
            {
              "name": "52463",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/52463"
            },
            {
              "name": "MDVSA-2012:032",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:032"
            },
            {
              "name": "1026803",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026803"
            },
            {
              "name": "48553",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48553"
            },
            {
              "name": "USN-1400-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1400-1"
            },
            {
              "name": "48561",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48561"
            },
            {
              "name": "RHSA-2012:0388",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0388.html"
            },
            {
              "name": "1026801",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026801"
            },
            {
              "name": "1026804",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026804"
            },
            {
              "name": "48513",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48513"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-0451",
    "datePublished": "2012-03-14T19:00:00",
    "dateReserved": "2012-01-09T00:00:00",
    "dateUpdated": "2024-08-06T18:23:30.980Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature