csaf_redhat - rhsa-2012

rhsa-2012_1089

Vulnerability from csaf_redhat

Published

2012-07-17 18:51

Modified

2024-11-22 05:33

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-1948, CVE-2012-1951, CVE-2012-1952, CVE-2012-1953, CVE-2012-1954, CVE-2012-1958, CVE-2012-1962, CVE-2012-1967) Malicious content could bypass same-compartment security wrappers (SCSW) and execute arbitrary code with chrome privileges. (CVE-2012-1959) A flaw in the way Thunderbird called history.forward and history.back could allow an attacker to conceal a malicious URL, possibly tricking a user into believing they are viewing trusted content. (CVE-2012-1955) A flaw in a parser utility class used by Thunderbird to parse feeds (such as RSS) could allow an attacker to execute arbitrary JavaScript with the privileges of the user running Thunderbird. This issue could have affected other Thunderbird components or add-ons that assume the class returns sanitized input. (CVE-2012-1957) A flaw in the way Thunderbird handled X-Frame-Options headers could allow malicious content to perform a clickjacking attack. (CVE-2012-1961) A flaw in the way Content Security Policy (CSP) reports were generated by Thunderbird could allow malicious content to steal a victim's OAuth 2.0 access tokens and OpenID credentials. (CVE-2012-1963) A flaw in the way Thunderbird handled certificate warnings could allow a man-in-the-middle attacker to create a crafted warning, possibly tricking a user into accepting an arbitrary certificate as trusted. (CVE-2012-1964) The nss update RHBA-2012:0337 for Red Hat Enterprise Linux 5 and 6 introduced a mitigation for the CVE-2011-3389 flaw. For compatibility reasons, it remains disabled by default in the nss packages. This update makes Thunderbird enable the mitigation by default. It can be disabled by setting the NSS_SSL_CBC_RANDOM_IV environment variable to 0 before launching Thunderbird. (BZ#838879) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Benoit Jacob, Jesse Ruderman, Christian Holler, Bill McCloskey, Abhishek Arya, Arthur Gerkis, Bill Keese, moz_bug_r_a4, Bobby Holley, Mariusz Mlynski, Mario Heiderich, Frédéric Buclin, Karthikeyan Bhargavan, and Matt McCutchen as the original reporters of these issues. Note: None of the issues in this advisory can be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 10.0.6 ESR, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes multiple security issues is now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed content. Malicious\ncontent could cause Thunderbird to crash or, potentially, execute arbitrary\ncode with the privileges of the user running Thunderbird. (CVE-2012-1948,\nCVE-2012-1951, CVE-2012-1952, CVE-2012-1953, CVE-2012-1954, CVE-2012-1958,\nCVE-2012-1962, CVE-2012-1967)\n\nMalicious content could bypass same-compartment security wrappers (SCSW)\nand execute arbitrary code with chrome privileges. (CVE-2012-1959)\n\nA flaw in the way Thunderbird called history.forward and history.back could\nallow an attacker to conceal a malicious URL, possibly tricking a user\ninto believing they are viewing trusted content. (CVE-2012-1955)\n\nA flaw in a parser utility class used by Thunderbird to parse feeds (such\nas RSS) could allow an attacker to execute arbitrary JavaScript with the\nprivileges of the user running Thunderbird. This issue could have affected\nother Thunderbird components or add-ons that assume the class returns\nsanitized input. (CVE-2012-1957)\n\nA flaw in the way Thunderbird handled X-Frame-Options headers could allow\nmalicious content to perform a clickjacking attack. (CVE-2012-1961)\n\nA flaw in the way Content Security Policy (CSP) reports were generated by\nThunderbird could allow malicious content to steal a victim\u0027s OAuth 2.0\naccess tokens and OpenID credentials. (CVE-2012-1963)\n\nA flaw in the way Thunderbird handled certificate warnings could allow a\nman-in-the-middle attacker to create a crafted warning, possibly tricking\na user into accepting an arbitrary certificate as trusted. (CVE-2012-1964)\n\nThe nss update RHBA-2012:0337 for Red Hat Enterprise Linux 5 and 6\nintroduced a mitigation for the CVE-2011-3389 flaw. For compatibility\nreasons, it remains disabled by default in the nss packages. This update\nmakes Thunderbird enable the mitigation by default. It can be disabled by\nsetting the NSS_SSL_CBC_RANDOM_IV environment variable to 0 before\nlaunching Thunderbird. (BZ#838879)\n\nRed Hat would like to thank the Mozilla project for reporting these issues.\nUpstream acknowledges Benoit Jacob, Jesse Ruderman, Christian Holler, Bill\nMcCloskey, Abhishek Arya, Arthur Gerkis, Bill Keese, moz_bug_r_a4, Bobby\nHolley, Mariusz Mlynski, Mario Heiderich, Fr\u00e9d\u00e9ric Buclin, Karthikeyan\nBhargavan, and Matt McCutchen as the original reporters of these issues.\n\nNote: None of the issues in this advisory can be exploited by a\nspecially-crafted HTML mail message as JavaScript is disabled by default\nfor mail messages. They could be exploited another way in Thunderbird, for\nexample, when viewing the full remote content of an RSS feed.\n\nAll Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.6 ESR, which corrects these issues. After\ninstalling the update, Thunderbird must be restarted for the changes to\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2012:1089",
        "url": "https://access.redhat.com/errata/RHSA-2012:1089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://rhn.redhat.com/errata/RHBA-2012-0337.html",
        "url": "https://rhn.redhat.com/errata/RHBA-2012-0337.html"
      },
      {
        "category": "external",
        "summary": "838879",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=838879"
      },
      {
        "category": "external",
        "summary": "840201",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840201"
      },
      {
        "category": "external",
        "summary": "840205",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840205"
      },
      {
        "category": "external",
        "summary": "840206",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840206"
      },
      {
        "category": "external",
        "summary": "840208",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840208"
      },
      {
        "category": "external",
        "summary": "840211",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840211"
      },
      {
        "category": "external",
        "summary": "840212",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840212"
      },
      {
        "category": "external",
        "summary": "840214",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840214"
      },
      {
        "category": "external",
        "summary": "840215",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840215"
      },
      {
        "category": "external",
        "summary": "840220",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840220"
      },
      {
        "category": "external",
        "summary": "840222",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840222"
      },
      {
        "category": "external",
        "summary": "840259",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840259"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1089.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T05:33:35+00:00",
      "generator": {
        "date": "2024-11-22T05:33:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2012:1089",
      "initial_release_date": "2012-07-17T18:51:00+00:00",
      "revision_history": [
        {
          "date": "2012-07-17T18:51:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2012-07-17T18:56:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T05:33:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEL Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "RHEL Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS-5.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.3.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.3.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.3.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
                  "product_id": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.6-1.el5_8?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el5_8.i386",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el5_8.i386",
                  "product_id": "thunderbird-0:10.0.6-1.el5_8.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el5_8?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
                  "product_id": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.6-1.el5_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el5_8.x86_64",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el5_8.x86_64",
                  "product_id": "thunderbird-0:10.0.6-1.el5_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el5_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el6_3.x86_64",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el6_3.x86_64",
                  "product_id": "thunderbird-0:10.0.6-1.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
                  "product_id": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.6-1.el6_3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el5_8.src",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el5_8.src",
                  "product_id": "thunderbird-0:10.0.6-1.el5_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el5_8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el6_3.src",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el6_3.src",
                  "product_id": "thunderbird-0:10.0.6-1.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el6_3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el6_3.ppc64",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el6_3.ppc64",
                  "product_id": "thunderbird-0:10.0.6-1.el6_3.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el6_3?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
                  "product_id": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.6-1.el6_3?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el6_3.s390x",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el6_3.s390x",
                  "product_id": "thunderbird-0:10.0.6-1.el6_3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el6_3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
                  "product_id": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.6-1.el6_3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.6-1.el6_3.i686",
                "product": {
                  "name": "thunderbird-0:10.0.6-1.el6_3.i686",
                  "product_id": "thunderbird-0:10.0.6-1.el6_3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.6-1.el6_3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
                  "product_id": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.6-1.el6_3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el5_8.i386",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el5_8.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el5_8.src",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el5_8.x86_64",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el5_8.i386",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el5_8.src as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el5_8.src",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el5_8.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.i686",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.ppc64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.s390x",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.src",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.x86_64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.i686",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.ppc64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.s390x",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.src",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.x86_64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.i686",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.ppc64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.s390x",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.src",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.6-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.6-1.el6_3.x86_64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Benoit Jacob",
            "Jesse Ruderman",
            "Christian Holler",
            "Bill McCloskey"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1948",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840201"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:14.0/ rv:10.0.6) (MFSA 2012-42)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1948"
        },
        {
          "category": "external",
          "summary": "RHBZ#840201",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840201"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1948",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1948"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1948",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1948"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:14.0/ rv:10.0.6) (MFSA 2012-42)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1951",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840205"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Gecko memory corruption (MFSA 2012-44)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1951"
        },
        {
          "category": "external",
          "summary": "RHBZ#840205",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840205"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1951",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1951"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1951",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1951"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Gecko memory corruption (MFSA 2012-44)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1952",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840205"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Gecko memory corruption (MFSA 2012-44)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1952"
        },
        {
          "category": "external",
          "summary": "RHBZ#840205",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840205"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1952",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1952"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1952",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1952"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Gecko memory corruption (MFSA 2012-44)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1953",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840205"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Gecko memory corruption (MFSA 2012-44)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1953"
        },
        {
          "category": "external",
          "summary": "RHBZ#840205",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840205"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1953",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1953"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1953",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1953"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Gecko memory corruption (MFSA 2012-44)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1954",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840205"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Gecko memory corruption (MFSA 2012-44)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1954"
        },
        {
          "category": "external",
          "summary": "RHBZ#840205",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840205"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1954",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1954"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1954",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1954"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Gecko memory corruption (MFSA 2012-44)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1955",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840206"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Spoofing issue with location (MFSA 2012-45)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1955"
        },
        {
          "category": "external",
          "summary": "RHBZ#840206",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840206"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1955",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1955"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1955",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1955"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Spoofing issue with location (MFSA 2012-45)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mario Heiderich"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1957",
      "discovery_date": "2012-07-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840208"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Improper filtering of javascript in HTML feed-view (MFSA 2012-47)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1957"
        },
        {
          "category": "external",
          "summary": "RHBZ#840208",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840208"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1957",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1957"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1957",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1957"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Improper filtering of javascript in HTML feed-view (MFSA 2012-47)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2012-1958",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840211"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: use-after-free in nsGlobalWindow::PageHidden (MFSA 2012-48)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1958"
        },
        {
          "category": "external",
          "summary": "RHBZ#840211",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840211"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1958",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1958"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1958",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1958"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: use-after-free in nsGlobalWindow::PageHidden (MFSA 2012-48)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mozilla developer Bobby Holley"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1959",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Same-compartment Security Wrappers can be bypassed (MFSA 2012-49)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1959"
        },
        {
          "category": "external",
          "summary": "RHBZ#840212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1959",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1959"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1959",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1959"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Same-compartment Security Wrappers can be bypassed (MFSA 2012-49)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mozilla developer Fr\u00e9d\u00e9ric Buclin"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1961",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840214"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: X-Frame-Options header ignored when duplicated (MFSA 2012-51)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1961"
        },
        {
          "category": "external",
          "summary": "RHBZ#840214",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840214"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1961",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1961"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1961",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1961"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: X-Frame-Options header ignored when duplicated (MFSA 2012-51)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Bill Keese"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1962",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840215"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: JSDependentString:: undepend string conversion results in memory corruption (MFSA 2012-52)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1962"
        },
        {
          "category": "external",
          "summary": "RHBZ#840215",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840215"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1962",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1962"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1962",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1962"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: JSDependentString:: undepend string conversion results in memory corruption (MFSA 2012-52)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2012-1963",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840220"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Content Security Policy 1.0 implementation errors cause data leakage (MFSA 2012-53)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1963"
        },
        {
          "category": "external",
          "summary": "RHBZ#840220",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840220"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1963",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1963"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1963",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1963"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Content Security Policy 1.0 implementation errors cause data leakage (MFSA 2012-53)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Matt McCutchen"
          ]
        }
      ],
      "cve": "CVE-2012-1964",
      "discovery_date": "2012-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840222"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Clickjacking of certificate warning page (MFSA 2012-54)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1964"
        },
        {
          "category": "external",
          "summary": "RHBZ#840222",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840222"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1964",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1964"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1964",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1964"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Clickjacking of certificate warning page (MFSA 2012-54)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "moz_bug_r_a4"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1967",
      "discovery_date": "2012-07-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "840259"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Code execution through javascript: URLs (MFSA 2012-56)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1967"
        },
        {
          "category": "external",
          "summary": "RHBZ#840259",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=840259"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1967",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1967"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1967",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1967"
        }
      ],
      "release_date": "2012-07-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-07-17T18:51:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1089"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.6-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.6-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.6-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.6-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Code execution through javascript: URLs (MFSA 2012-56)"
    }
  ]
}

cve-2012-1961

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/54584	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=761655	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-51.html	x_refsource_CONFIRM
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://osvdb.org/84003	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.266Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54584"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "84003",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84003"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          },
          {
            "name": "oval:org.mitre.oval:def:16993",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54584"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "84003",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84003"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        },
        {
          "name": "oval:org.mitre.oval:def:16993",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54584",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54584"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "84003",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84003"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            },
            {
              "name": "oval:org.mitre.oval:def:16993",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1961",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.266Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1957

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/84000	vdb-entry, x_refsource_OSVDB
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16844	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/54583	vdb-entry, x_refsource_BID
	http://www.mozilla.org/security/announce/2012/mfsa2012-47.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=750096	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.171Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "84000",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84000"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16844",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16844"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "54583",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54583"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-47.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750096"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "84000",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84000"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16844",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16844"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "54583",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54583"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-47.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750096"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1957",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "84000",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84000"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16844",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16844"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "54583",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54583"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-47.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-47.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=750096",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750096"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1957",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.171Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1951

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/54578	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2012/mfsa2012-44.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=752902	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16077	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/83997	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.088Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54578",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54578"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=752902"
          },
          {
            "name": "oval:org.mitre.oval:def:16077",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16077"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "83997",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/83997"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54578",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54578"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=752902"
        },
        {
          "name": "oval:org.mitre.oval:def:16077",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16077"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "83997",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/83997"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1951",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54578",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54578"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=752902",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=752902"
            },
            {
              "name": "oval:org.mitre.oval:def:16077",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16077"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "83997",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/83997"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1951",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.088Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1955

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-45.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=757376	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17004	vdb-entry, signature, x_refsource_OVAL
	http://osvdb.org/83996	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/54586	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-45.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=757376"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "oval:org.mitre.oval:def:17004",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17004"
          },
          {
            "name": "83996",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/83996"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          },
          {
            "name": "54586",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54586"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-45.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=757376"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "oval:org.mitre.oval:def:17004",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17004"
        },
        {
          "name": "83996",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/83996"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        },
        {
          "name": "54586",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54586"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1955",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-45.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-45.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=757376",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=757376"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "oval:org.mitre.oval:def:17004",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17004"
            },
            {
              "name": "83996",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/83996"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            },
            {
              "name": "54586",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54586"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1955",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1959

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=754044	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://osvdb.org/84002	vdb-entry, x_refsource_OSVDB
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=737559	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-49.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16920	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/54576	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.307Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=754044"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "84002",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84002"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=737559"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-49.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16920",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16920"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "54576",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54576"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=754044"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "84002",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84002"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=737559"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-49.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16920",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16920"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "54576",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54576"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1959",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=754044",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=754044"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "84002",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84002"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=737559",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=737559"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-49.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-49.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16920",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16920"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "54576",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54576"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1959",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.307Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1953

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/54578	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2012/mfsa2012-44.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://osvdb.org/83998	vdb-entry, x_refsource_OSVDB
	https://bugzilla.mozilla.org/show_bug.cgi?id=765218	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.137Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "oval:org.mitre.oval:def:16894",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894"
          },
          {
            "name": "54578",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54578"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "83998",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/83998"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765218"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "oval:org.mitre.oval:def:16894",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894"
        },
        {
          "name": "54578",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54578"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "83998",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/83998"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765218"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1953",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "oval:org.mitre.oval:def:16894",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894"
            },
            {
              "name": "54578",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54578"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "83998",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/83998"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=765218",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765218"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1953",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.137Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1954

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/54578	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2012/dsa-2514	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2012/dsa-2528	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/49963	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-44.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16984	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://osvdb.org/83995	vdb-entry, x_refsource_OSVDB
	https://bugzilla.mozilla.org/show_bug.cgi?id=765139	x_refsource_CONFIRM
	http://secunia.com/advisories/49964	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54578",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54578"
          },
          {
            "name": "DSA-2514",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2514"
          },
          {
            "name": "DSA-2528",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2528"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "49963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49963"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16984",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16984"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "83995",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/83995"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765139"
          },
          {
            "name": "49964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49964"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54578",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54578"
        },
        {
          "name": "DSA-2514",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2514"
        },
        {
          "name": "DSA-2528",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2528"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "49963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49963"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16984",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16984"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "83995",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/83995"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765139"
        },
        {
          "name": "49964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49964"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1954",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54578",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54578"
            },
            {
              "name": "DSA-2514",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2514"
            },
            {
              "name": "DSA-2528",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2528"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "49963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49963"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16984",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16984"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "83995",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/83995"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=765139",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765139"
            },
            {
              "name": "49964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49964"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1954",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1963

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=767778	x_refsource_CONFIRM
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056	vdb-entry, signature, x_refsource_OVAL
	http://osvdb.org/84005	vdb-entry, x_refsource_OSVDB
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/54582	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-53.html	x_refsource_CONFIRM
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.277Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17056",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056"
          },
          {
            "name": "84005",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84005"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "54582",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54582"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17056",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056"
        },
        {
          "name": "84005",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84005"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "54582",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54582"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1963",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17056",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056"
            },
            {
              "name": "84005",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84005"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "54582",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54582"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1963",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.277Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1948

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2514	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2012/dsa-2528	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/49963	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=746103	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=772282	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2012/mfsa2012-42.html	x_refsource_CONFIRM
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/54580	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=763225	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=732233	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=750575	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=756600	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=749385	x_refsource_CONFIRM
	http://secunia.com/advisories/49964	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=758471	x_refsource_CONFIRM
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=754989	x_refsource_CONFIRM
	http://osvdb.org/84007	vdb-entry, x_refsource_OSVDB
	https://bugzilla.mozilla.org/show_bug.cgi?id=746896	x_refsource_CONFIRM
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16744	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.251Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "DSA-2514",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2514"
          },
          {
            "name": "DSA-2528",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2528"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "49963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49963"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=746103"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=772282"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-42.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "54580",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54580"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=763225"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=732233"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750575"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756600"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=749385"
          },
          {
            "name": "49964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49964"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758471"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=754989"
          },
          {
            "name": "84007",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84007"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=746896"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          },
          {
            "name": "oval:org.mitre.oval:def:16744",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16744"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "DSA-2514",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2514"
        },
        {
          "name": "DSA-2528",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2528"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "49963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49963"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=746103"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=772282"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-42.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "54580",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54580"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=763225"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=732233"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750575"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756600"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=749385"
        },
        {
          "name": "49964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49964"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758471"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=754989"
        },
        {
          "name": "84007",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84007"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=746896"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        },
        {
          "name": "oval:org.mitre.oval:def:16744",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16744"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1948",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "DSA-2514",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2514"
            },
            {
              "name": "DSA-2528",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2528"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "49963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49963"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=746103",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=746103"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=772282",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=772282"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-42.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-42.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "54580",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54580"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=763225",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=763225"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=732233",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=732233"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=750575",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750575"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=756600",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756600"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=749385",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=749385"
            },
            {
              "name": "49964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49964"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=758471",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758471"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=754989",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=754989"
            },
            {
              "name": "84007",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84007"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=746896",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=746896"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            },
            {
              "name": "oval:org.mitre.oval:def:16744",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16744"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1948",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1958

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=750820	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/54574	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-48.html	x_refsource_CONFIRM
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://osvdb.org/84001	vdb-entry, x_refsource_OSVDB
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.375Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750820"
          },
          {
            "name": "54574",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54574"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-48.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "84001",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84001"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16434",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750820"
        },
        {
          "name": "54574",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54574"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-48.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "84001",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84001"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16434",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1958",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=750820",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=750820"
            },
            {
              "name": "54574",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54574"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-48.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-48.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "84001",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84001"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16434",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1958",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1962

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/84004	vdb-entry, x_refsource_OSVDB
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/54575	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2012/mfsa2012-52.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=764296	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.057Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "84004",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84004"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "54575",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54575"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "oval:org.mitre.oval:def:16729",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "84004",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84004"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "54575",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54575"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "oval:org.mitre.oval:def:16729",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1962",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "84004",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84004"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "54575",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54575"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "oval:org.mitre.oval:def:16729",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1962",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1967

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-56.html	x_refsource_CONFIRM
	http://www.debian.org/security/2012/dsa-2514	vendor-advisory, x_refsource_DEBIAN
	http://www.debian.org/security/2012/dsa-2528	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/49963	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/84013	vdb-entry, x_refsource_OSVDB
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/54573	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=758344	x_refsource_CONFIRM
	http://secunia.com/advisories/49964	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.258Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"
          },
          {
            "name": "DSA-2514",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2514"
          },
          {
            "name": "DSA-2528",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2528"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "49963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49963"
          },
          {
            "name": "84013",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84013"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "oval:org.mitre.oval:def:17025",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "54573",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54573"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344"
          },
          {
            "name": "49964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49964"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"
        },
        {
          "name": "DSA-2514",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2514"
        },
        {
          "name": "DSA-2528",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2528"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "49963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49963"
        },
        {
          "name": "84013",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84013"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "oval:org.mitre.oval:def:17025",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "54573",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54573"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344"
        },
        {
          "name": "49964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49964"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1967",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"
            },
            {
              "name": "DSA-2514",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2514"
            },
            {
              "name": "DSA-2528",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2528"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "49963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49963"
            },
            {
              "name": "84013",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84013"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "oval:org.mitre.oval:def:17025",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "54573",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54573"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344"
            },
            {
              "name": "49964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49964"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1967",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1964

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/54581	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=633691	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-54.html	x_refsource_CONFIRM
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/84011	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54581",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54581"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "84011",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84011"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          },
          {
            "name": "oval:org.mitre.oval:def:16783",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54581",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54581"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "84011",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84011"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        },
        {
          "name": "oval:org.mitre.oval:def:16783",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1964",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54581",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54581"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "84011",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84011"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            },
            {
              "name": "oval:org.mitre.oval:def:16783",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1964",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.146Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1952

Vulnerability from cvelistv5

Published

2012-07-18 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

References

▼	URL	Tags
	http://secunia.com/advisories/49977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49992	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/54578	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id?1027256	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2012/mfsa2012-44.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1509-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1027258	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=759249	x_refsource_CONFIRM
	http://secunia.com/advisories/49979	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-1510-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/49965	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1027257	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html	vendor-advisory, x_refsource_SUSE
	http://osvdb.org/83999	vdb-entry, x_refsource_OSVDB
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49994	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/49968	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1509-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16942	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/49993	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/49972	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.237Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54578",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54578"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=759249"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "83999",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/83999"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16942",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16942"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54578",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54578"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=759249"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "83999",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/83999"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16942",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16942"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1952",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54578",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54578"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=759249",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=759249"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "83999",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/83999"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16942",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16942"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1952",
    "datePublished": "2012-07-18T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.237Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature