Vulnerability-Lookup

RHSA-2012_1350

Vulnerability from csaf_redhat - Published: 2012-10-09 22:45 - Updated: 2024-11-22 05:50

Summary

Red Hat Security Advisory: firefox security and bug fix update

Severity

Critical

Notes

Topic: Updated firefox packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-3982, CVE-2012-3988, CVE-2012-3990, CVE-2012-3995, CVE-2012-4179, CVE-2012-4180, CVE-2012-4181, CVE-2012-4182, CVE-2012-4183, CVE-2012-4185, CVE-2012-4186, CVE-2012-4187, CVE-2012-4188) Two flaws in Firefox could allow a malicious website to bypass intended restrictions, possibly leading to information disclosure, or Firefox executing arbitrary code. Note that the information disclosure issue could possibly be combined with other flaws to achieve arbitrary code execution. (CVE-2012-3986, CVE-2012-3991) Multiple flaws were found in the location object implementation in Firefox. Malicious content could be used to perform cross-site scripting attacks, script injection, or spoofing attacks. (CVE-2012-1956, CVE-2012-3992, CVE-2012-3994) Two flaws were found in the way Chrome Object Wrappers were implemented. Malicious content could be used to perform cross-site scripting attacks or cause Firefox to execute arbitrary code. (CVE-2012-3993, CVE-2012-4184) For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 10.0.8 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christian Holler, Jesse Ruderman, Soroush Dalili, miaubiz, Abhishek Arya, Atte Kettunen, Johnny Stenback, Alice White, moz_bug_r_a4, and Mariusz Mlynski as the original reporters of these issues. This update also fixes the following bug: * In certain environments, storing personal Firefox configuration files (~/.mozilla/) on an NFS share, such as when your home directory is on a NFS share, led to Firefox functioning incorrectly, for example, navigation buttons not working as expected, and bookmarks not saving. This update adds a new configuration option, storage.nfs_filesystem, that can be used to resolve this issue. If you experience this issue: 1) Start Firefox. 2) Type "about:config" (without quotes) into the URL bar and press the Enter key. 3) If prompted with "This might void your warranty!", click the "I'll be careful, I promise!" button. 4) Right-click in the Preference Name list. In the menu that opens, select New -> Boolean. 5) Type "storage.nfs_filesystem" (without quotes) for the preference name and then click the OK button. 6) Select "true" for the boolean value and then press the OK button. (BZ#809571, BZ#816234) All Firefox users should upgrade to these updated packages, which contain Firefox version 10.0.8 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2012-1956

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Fixed 277 products

Product	Version	Remediation
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.8-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.8-1.el6_3.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2012-3982

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-3986

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Moderate

CVE-2012-3988

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-3990

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-3991

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-3992

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Moderate

CVE-2012-3993

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Moderate

CVE-2012-3994

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Moderate

CVE-2012-3995

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4179

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4180

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4181

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4182

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4183

Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4184

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Moderate

CVE-2012-4185

Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4186

Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4187

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

CVE-2012-4188

Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1956

Threats

Impact Critical

References

97 references

URL	Category
https://access.redhat.com/errata/RHSA-2012:1350	self
https://access.redhat.com/security/updates/classi…	external
http://www.mozilla.org/security/known-vulnerabili…	external
https://bugzilla.redhat.com/show_bug.cgi?id=851912	external
https://bugzilla.redhat.com/show_bug.cgi?id=863614	external
https://bugzilla.redhat.com/show_bug.cgi?id=863618	external
https://bugzilla.redhat.com/show_bug.cgi?id=863619	external
https://bugzilla.redhat.com/show_bug.cgi?id=863621	external
https://bugzilla.redhat.com/show_bug.cgi?id=863622	external
https://bugzilla.redhat.com/show_bug.cgi?id=863623	external
https://bugzilla.redhat.com/show_bug.cgi?id=863624	external
https://bugzilla.redhat.com/show_bug.cgi?id=863625	external
https://bugzilla.redhat.com/show_bug.cgi?id=863626	external
https://bugzilla.redhat.com/show_bug.cgi?id=863628	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2012-1956	self
https://bugzilla.redhat.com/show_bug.cgi?id=851912	external
https://www.cve.org/CVERecord?id=CVE-2012-1956	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1956	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3982	self
https://bugzilla.redhat.com/show_bug.cgi?id=863614	external
https://www.cve.org/CVERecord?id=CVE-2012-3982	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3982	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3986	self
https://bugzilla.redhat.com/show_bug.cgi?id=863618	external
https://www.cve.org/CVERecord?id=CVE-2012-3986	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3986	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3988	self
https://bugzilla.redhat.com/show_bug.cgi?id=863619	external
https://www.cve.org/CVERecord?id=CVE-2012-3988	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3988	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3990	self
https://bugzilla.redhat.com/show_bug.cgi?id=863628	external
https://www.cve.org/CVERecord?id=CVE-2012-3990	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3990	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3991	self
https://bugzilla.redhat.com/show_bug.cgi?id=863621	external
https://www.cve.org/CVERecord?id=CVE-2012-3991	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3991	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3992	self
https://bugzilla.redhat.com/show_bug.cgi?id=863624	external
https://www.cve.org/CVERecord?id=CVE-2012-3992	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3992	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3993	self
https://bugzilla.redhat.com/show_bug.cgi?id=863623	external
https://www.cve.org/CVERecord?id=CVE-2012-3993	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3993	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3994	self
https://bugzilla.redhat.com/show_bug.cgi?id=863622	external
https://www.cve.org/CVERecord?id=CVE-2012-3994	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3994	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-3995	self
https://bugzilla.redhat.com/show_bug.cgi?id=863625	external
https://www.cve.org/CVERecord?id=CVE-2012-3995	external
https://nvd.nist.gov/vuln/detail/CVE-2012-3995	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-4179	self
https://www.cve.org/CVERecord?id=CVE-2012-4179	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4179	external
https://access.redhat.com/security/cve/CVE-2012-4180	self
https://www.cve.org/CVERecord?id=CVE-2012-4180	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4180	external
https://access.redhat.com/security/cve/CVE-2012-4181	self
https://www.cve.org/CVERecord?id=CVE-2012-4181	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4181	external
https://access.redhat.com/security/cve/CVE-2012-4182	self
https://www.cve.org/CVERecord?id=CVE-2012-4182	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4182	external
https://access.redhat.com/security/cve/CVE-2012-4183	self
https://www.cve.org/CVERecord?id=CVE-2012-4183	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4183	external
https://access.redhat.com/security/cve/CVE-2012-4184	self
https://www.cve.org/CVERecord?id=CVE-2012-4184	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4184	external
https://access.redhat.com/security/cve/CVE-2012-4185	self
https://bugzilla.redhat.com/show_bug.cgi?id=863626	external
https://www.cve.org/CVERecord?id=CVE-2012-4185	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4185	external
http://www.mozilla.org/security/announce/2012/mfs…	external
https://access.redhat.com/security/cve/CVE-2012-4186	self
https://www.cve.org/CVERecord?id=CVE-2012-4186	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4186	external
https://access.redhat.com/security/cve/CVE-2012-4187	self
https://www.cve.org/CVERecord?id=CVE-2012-4187	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4187	external
https://access.redhat.com/security/cve/CVE-2012-4188	self
https://www.cve.org/CVERecord?id=CVE-2012-4188	external
https://nvd.nist.gov/vuln/detail/CVE-2012-4188	external

Acknowledgments

Mozilla project

Mariusz Mlynski

Johnny Stenback

Soroush Dalili

miaubiz

Alice White

Mariusz Mlynski moz_bug_r_a4

Abhishek Arya

Atte Kettunen

JSON

To clipboard

Loading 1.4 MB of JSON…

CVE-2012-1956 (GCVE-0-2012-1956)

Vulnerability from cvelistv5 – Published: 2012-08-29 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=756719	x_refsource_CONFIRM
http://www.securityfocus.com/bid/55260	vdb-entryx_refsource_BID
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1548-1	vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-1548-2	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2012-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.097Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16367",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719"
          },
          {
            "name": "55260",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55260"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16367",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719"
        },
        {
          "name": "55260",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55260"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1956",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16367",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719"
            },
            {
              "name": "55260",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55260"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1956",
    "datePublished": "2012-08-29T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3982 (GCVE-0-2012-3982)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=794025	x_refsource_CONFIRM
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2565	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/55924	vdb-entryx_refsource_BID
http://www.debian.org/security/2012/dsa-2572	vendor-advisoryx_refsource_DEBIAN
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51181	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://bugzilla.mozilla.org/show_bug.cgi?id=790856	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2012/dsa-2569	vendor-advisoryx_refsource_DEBIAN
https://bugzilla.mozilla.org/show_bug.cgi?id=783502	x_refsource_CONFIRM

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.246Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16612",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612"
          },
          {
            "name": "55924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55924"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16612",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612"
        },
        {
          "name": "55924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55924"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3982",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16612",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612"
            },
            {
              "name": "55924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55924"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3982",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3986 (GCVE-0-2012-3986)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

19 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=775868	x_refsource_CONFIRM
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2565	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.debian.org/security/2012/dsa-2572	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51181	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/55922	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2012/dsa-2569	vendor-advisoryx_refsource_DEBIAN

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.183Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868"
          },
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16834",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "55922",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55922"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868"
        },
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16834",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "55922",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55922"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3986",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868"
            },
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16834",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "55922",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55922"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3986",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.183Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3988 (GCVE-0-2012-3988)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://osvdb.org/86109	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=725770	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "firefox-full-screen-code-exec(79149)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79149"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16334",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334"
          },
          {
            "name": "86109",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86109"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "firefox-full-screen-code-exec(79149)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79149"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16334",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334"
        },
        {
          "name": "86109",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86109"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3988",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "firefox-full-screen-code-exec(79149)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79149"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16334",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334"
            },
            {
              "name": "86109",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86109"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3988",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3990 (GCVE-0-2012-3990)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

19 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2565	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.debian.org/security/2012/dsa-2572	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51181	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=787704	x_refsource_CONFIRM
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2012/dsa-2569	vendor-advisoryx_refsource_DEBIAN

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.208Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "firefox-nsicontent-code-exec(79172)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79172"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16642",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "firefox-nsicontent-code-exec(79172)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79172"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16642",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3990",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "firefox-nsicontent-code-exec(79172)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79172"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16642",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3990",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.208Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3991 (GCVE-0-2012-3991)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

20 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=783260	x_refsource_CONFIRM
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2565	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/55930	vdb-entryx_refsource_BID
http://www.debian.org/security/2012/dsa-2572	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://osvdb.org/86098	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51181	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2012/dsa-2569	vendor-advisoryx_refsource_DEBIAN

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.358Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "55930",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55930"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
          },
          {
            "name": "86098",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86098"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "oval:org.mitre.oval:def:16646",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "55930",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55930"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
        },
        {
          "name": "86098",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86098"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "oval:org.mitre.oval:def:16646",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3991",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "55930",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55930"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
            },
            {
              "name": "86098",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86098"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "oval:org.mitre.oval:def:16646",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3991",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3992 (GCVE-0-2012-3992)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/56128	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://bugzilla.mozilla.org/show_bug.cgi?id=775009	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "oval:org.mitre.oval:def:16987",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "56128",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56128"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "oval:org.mitre.oval:def:16987",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "56128",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56128"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3992",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "oval:org.mitre.oval:def:16987",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "56128",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56128"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3992",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3993 (GCVE-0-2012-3993)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

17 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/86111	vdb-entryx_refsource_OSVDB
https://bugzilla.mozilla.org/show_bug.cgi?id=768101	x_refsource_CONFIRM
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/56119	vdb-entryx_refsource_BID

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.342Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16718",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "firefox-cow-privilege-escalation(79153)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79153"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "86111",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86111"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "56119",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56119"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an \"XrayWrapper pollution\" issue."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16718",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "firefox-cow-privilege-escalation(79153)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79153"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "86111",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86111"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "56119",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56119"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3993",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an \"XrayWrapper pollution\" issue."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16718",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "firefox-cow-privilege-escalation(79153)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79153"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "86111",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86111"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "56119",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56119"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3993",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3994 (GCVE-0-2012-3994)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/86110	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=765527	x_refsource_CONFIRM
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/56118	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.251Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "86110",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86110"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "56118",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56118"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "oval:org.mitre.oval:def:16798",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "86110",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86110"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "56118",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56118"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "oval:org.mitre.oval:def:16798",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3994",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "86110",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86110"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "56118",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56118"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "oval:org.mitre.oval:def:16798",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3994",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-3995 (GCVE-0-2012-3995)

Vulnerability from cvelistv5 – Published: 2012-10-10 17:00 – Updated: 2024-08-06 20:21

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://secunia.com/advisories/50904	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50984	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50935	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50856	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/50892	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=765621	x_refsource_CONFIRM
http://secunia.com/advisories/50936	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/55318	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/56136	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.ubuntu.com/usn/USN-1611-1	vendor-advisoryx_refsource_UBUNTU
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM

Date Public

2012-10-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.039Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "oval:org.mitre.oval:def:16808",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "56136",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56136"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "firefox-iscsswordspacingspace-code-exec(79156)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79156"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "oval:org.mitre.oval:def:16808",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "56136",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56136"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "firefox-iscsswordspacingspace-code-exec(79156)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79156"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3995",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "oval:org.mitre.oval:def:16808",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "56136",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56136"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "firefox-iscsswordspacingspace-code-exec(79156)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79156"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3995",
    "datePublished": "2012-10-10T17:00:00.000Z",
    "dateReserved": "2012-07-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T20:21:04.039Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2012_1350

CVE-2012-1956 (GCVE-0-2012-1956)

CVE-2012-3982 (GCVE-0-2012-3982)

CVE-2012-3986 (GCVE-0-2012-3986)

CVE-2012-3988 (GCVE-0-2012-3988)

CVE-2012-3990 (GCVE-0-2012-3990)

CVE-2012-3991 (GCVE-0-2012-3991)

CVE-2012-3992 (GCVE-0-2012-3992)

CVE-2012-3993 (GCVE-0-2012-3993)

CVE-2012-3994 (GCVE-0-2012-3994)

CVE-2012-3995 (GCVE-0-2012-3995)

Tags

Sightings

Nomenclature

Related by attack behaviour