csaf_redhat - rhsa-2012

rhsa-2012_1351

Vulnerability from csaf_redhat

Published

2012-10-09 22:25

Modified

2024-11-22 05:50

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-3982, CVE-2012-3988, CVE-2012-3990, CVE-2012-3995, CVE-2012-4179, CVE-2012-4180, CVE-2012-4181, CVE-2012-4182, CVE-2012-4183, CVE-2012-4185, CVE-2012-4186, CVE-2012-4187, CVE-2012-4188) Two flaws in Thunderbird could allow malicious content to bypass intended restrictions, possibly leading to information disclosure, or Thunderbird executing arbitrary code. Note that the information disclosure issue could possibly be combined with other flaws to achieve arbitrary code execution. (CVE-2012-3986, CVE-2012-3991) Multiple flaws were found in the location object implementation in Thunderbird. Malicious content could be used to perform cross-site scripting attacks, script injection, or spoofing attacks. (CVE-2012-1956, CVE-2012-3992, CVE-2012-3994) Two flaws were found in the way Chrome Object Wrappers were implemented. Malicious content could be used to perform cross-site scripting attacks or cause Thunderbird to execute arbitrary code. (CVE-2012-3993, CVE-2012-4184) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christian Holler, Jesse Ruderman, Soroush Dalili, miaubiz, Abhishek Arya, Atte Kettunen, Johnny Stenback, Alice White, moz_bug_r_a4, and Mariusz Mlynski as the original reporters of these issues. Note: None of the issues in this advisory can be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 10.0.8 ESR, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes several security issues is now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed content. Malicious\ncontent could cause Thunderbird to crash or, potentially, execute arbitrary\ncode with the privileges of the user running Thunderbird. (CVE-2012-3982,\nCVE-2012-3988, CVE-2012-3990, CVE-2012-3995, CVE-2012-4179, CVE-2012-4180,\nCVE-2012-4181, CVE-2012-4182, CVE-2012-4183, CVE-2012-4185, CVE-2012-4186,\nCVE-2012-4187, CVE-2012-4188)\n\nTwo flaws in Thunderbird could allow malicious content to bypass intended\nrestrictions, possibly leading to information disclosure, or Thunderbird\nexecuting arbitrary code. Note that the information disclosure issue could\npossibly be combined with other flaws to achieve arbitrary code execution.\n(CVE-2012-3986, CVE-2012-3991)\n\nMultiple flaws were found in the location object implementation in\nThunderbird. Malicious content could be used to perform cross-site\nscripting attacks, script injection, or spoofing attacks. (CVE-2012-1956,\nCVE-2012-3992, CVE-2012-3994)\n\nTwo flaws were found in the way Chrome Object Wrappers were implemented.\nMalicious content could be used to perform cross-site scripting attacks or\ncause Thunderbird to execute arbitrary code. (CVE-2012-3993, CVE-2012-4184)\n\nRed Hat would like to thank the Mozilla project for reporting these issues.\nUpstream acknowledges Christian Holler, Jesse Ruderman, Soroush Dalili,\nmiaubiz, Abhishek Arya, Atte Kettunen, Johnny Stenback, Alice White,\nmoz_bug_r_a4, and Mariusz Mlynski as the original reporters of these\nissues.\n\nNote: None of the issues in this advisory can be exploited by a\nspecially-crafted HTML mail message as JavaScript is disabled by default\nfor mail messages. They could be exploited another way in Thunderbird, for\nexample, when viewing the full remote content of an RSS feed.\n\nAll Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.8 ESR, which corrects these issues. After\ninstalling the update, Thunderbird must be restarted for the changes to\ntake effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2012:1351",
        "url": "https://access.redhat.com/errata/RHSA-2012:1351"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "851912",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=851912"
      },
      {
        "category": "external",
        "summary": "863614",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863614"
      },
      {
        "category": "external",
        "summary": "863618",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863618"
      },
      {
        "category": "external",
        "summary": "863619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863619"
      },
      {
        "category": "external",
        "summary": "863621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863621"
      },
      {
        "category": "external",
        "summary": "863622",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863622"
      },
      {
        "category": "external",
        "summary": "863623",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863623"
      },
      {
        "category": "external",
        "summary": "863624",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863624"
      },
      {
        "category": "external",
        "summary": "863625",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
      },
      {
        "category": "external",
        "summary": "863626",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863626"
      },
      {
        "category": "external",
        "summary": "863628",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863628"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1351.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T05:50:56+00:00",
      "generator": {
        "date": "2024-11-22T05:50:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2012:1351",
      "initial_release_date": "2012-10-09T22:25:00+00:00",
      "revision_history": [
        {
          "date": "2012-10-09T22:25:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2012-10-09T22:31:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T05:50:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEL Optional Productivity Applications (v. 5 server)",
                "product": {
                  "name": "RHEL Optional Productivity Applications (v. 5 server)",
                  "product_id": "5Server-DPAS-5.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_productivity:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.8.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.3.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.3.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.3.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
                  "product_id": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.8-1.el5_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el5_8.x86_64",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el5_8.x86_64",
                  "product_id": "thunderbird-0:10.0.8-1.el5_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el5_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el6_3.x86_64",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el6_3.x86_64",
                  "product_id": "thunderbird-0:10.0.8-1.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el6_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
                  "product_id": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.8-1.el6_3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
                  "product_id": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.8-1.el5_8?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el5_8.i386",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el5_8.i386",
                  "product_id": "thunderbird-0:10.0.8-1.el5_8.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el5_8?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el5_8.src",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el5_8.src",
                  "product_id": "thunderbird-0:10.0.8-1.el5_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el5_8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el6_3.src",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el6_3.src",
                  "product_id": "thunderbird-0:10.0.8-1.el6_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el6_3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el6_3.i686",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el6_3.i686",
                  "product_id": "thunderbird-0:10.0.8-1.el6_3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el6_3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
                  "product_id": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.8-1.el6_3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el6_3.s390x",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el6_3.s390x",
                  "product_id": "thunderbird-0:10.0.8-1.el6_3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el6_3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
                  "product_id": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.8-1.el6_3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:10.0.8-1.el6_3.ppc64",
                "product": {
                  "name": "thunderbird-0:10.0.8-1.el6_3.ppc64",
                  "product_id": "thunderbird-0:10.0.8-1.el6_3.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@10.0.8-1.el6_3?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
                  "product_id": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.8-1.el6_3?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el5_8.i386",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el5_8.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el5_8.src",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el5_8.x86_64",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
        "relates_to_product_reference": "5Client-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el5_8.i386",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el5_8.src as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el5_8.src",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el5_8.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
          "product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
        "relates_to_product_reference": "5Server-DPAS-5.8.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.i686",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.ppc64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.s390x",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.src",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.x86_64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
        "relates_to_product_reference": "6Client-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.i686",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.ppc64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.s390x",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.src",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.x86_64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
        "relates_to_product_reference": "6Server-optional-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.i686",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.ppc64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.s390x",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.src",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:10.0.8-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-0:10.0.8-1.el6_3.x86_64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
        "relates_to_product_reference": "6Workstation-6.3.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
        "relates_to_product_reference": "6Workstation-6.3.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-1956",
      "discovery_date": "2012-08-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "851912"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Location object can be shadowed using Object.defineProperty (MFSA 2012-59)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-1956"
        },
        {
          "category": "external",
          "summary": "RHBZ#851912",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=851912"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-1956",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-1956"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-1956",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1956"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
        }
      ],
      "release_date": "2012-08-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Location object can be shadowed using Object.defineProperty (MFSA 2012-59)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2012-3982",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863614"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3982"
        },
        {
          "category": "external",
          "summary": "RHBZ#863614",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863614"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3982",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3982"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3982",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3982"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Miscellaneous memory safety hazards (rv:10.0.8) (MFSA 2012-74)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Johnny Stenback"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3986",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863618"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Some DOMWindowUtils methods bypass security checks (MFSA 2012-77)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3986"
        },
        {
          "category": "external",
          "summary": "RHBZ#863618",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863618"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3986",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3986"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3986",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3986"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Some DOMWindowUtils methods bypass security checks (MFSA 2012-77)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Soroush Dalili"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3988",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: DOS and crash with full screen and history navigation (MFSA 2012-79)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3988"
        },
        {
          "category": "external",
          "summary": "RHBZ#863619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3988",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3988"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3988",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3988"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: DOS and crash with full screen and history navigation (MFSA 2012-79)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "miaubiz"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3990",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863628"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in the IME State Manager (MFSA 2012-87)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3990"
        },
        {
          "category": "external",
          "summary": "RHBZ#863628",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863628"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3990",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3990"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3990",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3990"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free in the IME State Manager (MFSA 2012-87)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Alice White"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3991",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: GetProperty function can bypass security checks (MFSA 2012-81)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3991"
        },
        {
          "category": "external",
          "summary": "RHBZ#863621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3991",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3991"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3991",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3991"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: GetProperty function can bypass security checks (MFSA 2012-81)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3992",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863624"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Spoofing and script injection through location.hash (MFSA 2012-84)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3992"
        },
        {
          "category": "external",
          "summary": "RHBZ#863624",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863624"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3992",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3992"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3992",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3992"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Spoofing and script injection through location.hash (MFSA 2012-84)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski",
            "moz_bug_r_a4"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3993",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863623"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an \"XrayWrapper pollution\" issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3993"
        },
        {
          "category": "external",
          "summary": "RHBZ#863623",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863623"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3993",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3993"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3993",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3993"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2012-3994",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863622"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: top object and location property accessible by plugins (MFSA 2012-82)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3994"
        },
        {
          "category": "external",
          "summary": "RHBZ#863622",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863622"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3994",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3994"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3994",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3994"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: top object and location property accessible by plugins (MFSA 2012-82)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-3995",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-3995"
        },
        {
          "category": "external",
          "summary": "RHBZ#863625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3995",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-3995"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3995",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3995"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4179",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4179"
        },
        {
          "category": "external",
          "summary": "RHBZ#863625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4179",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4179"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4179",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4179"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4180",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4180"
        },
        {
          "category": "external",
          "summary": "RHBZ#863625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4180",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4180"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4180",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4180"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4181",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4181"
        },
        {
          "category": "external",
          "summary": "RHBZ#863625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4181"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4182",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4182"
        },
        {
          "category": "external",
          "summary": "RHBZ#863625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4182"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Abhishek Arya"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4183",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863625"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4183"
        },
        {
          "category": "external",
          "summary": "RHBZ#863625",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863625"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4183",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4183"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4183",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4183"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer (MFSA 2012-85)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Mariusz Mlynski",
            "moz_bug_r_a4"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4184",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863623"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4184"
        },
        {
          "category": "external",
          "summary": "RHBZ#863623",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863623"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4184",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4184"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4184",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4184"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Atte Kettunen"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4185",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4185"
        },
        {
          "category": "external",
          "summary": "RHBZ#863626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4185",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4185"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4185",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4185"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Atte Kettunen"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4186",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4186"
        },
        {
          "category": "external",
          "summary": "RHBZ#863626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4186"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Atte Kettunen"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4187",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4187"
        },
        {
          "category": "external",
          "summary": "RHBZ#863626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4187",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4187"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4187",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4187"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Mozilla project"
          ]
        },
        {
          "names": [
            "Atte Kettunen"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2012-4188",
      "discovery_date": "2012-10-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "863626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
          "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
          "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
          "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
          "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2012-4188"
        },
        {
          "category": "external",
          "summary": "RHBZ#863626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=863626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2012-4188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4188"
        },
        {
          "category": "external",
          "summary": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        }
      ],
      "release_date": "2012-10-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-10-09T22:25:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:1351"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Client-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.src",
            "5Server-DPAS-5.8.Z:thunderbird-0:10.0.8-1.el5_8.x86_64",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.i386",
            "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.8-1.el5_8.x86_64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Client-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Client-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Server-optional-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Server-optional-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.src",
            "6Workstation-6.3.z:thunderbird-0:10.0.8-1.el6_3.x86_64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.i686",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.ppc64",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.s390x",
            "6Workstation-6.3.z:thunderbird-debuginfo-0:10.0.8-1.el6_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Heap memory corruption issues found using Address Sanitizer (MFSA 2012-86)"
    }
  ]
}

cve-2012-4181

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/86100	vdb-entry, x_refsource_OSVDB
	https://bugzilla.mozilla.org/show_bug.cgi?id=786111	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/56130	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79159	vdb-entry, x_refsource_XF
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-85.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "86100",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86100"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=786111"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16523",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "56130",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56130"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "firefox-nssmilanimationcontroller-code-exec(79159)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79159"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "86100",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86100"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=786111"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16523",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "56130",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56130"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "firefox-nssmilanimationcontroller-code-exec(79159)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79159"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4181",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "86100",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86100"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=786111",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=786111"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16523",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16523"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "56130",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56130"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "firefox-nssmilanimationcontroller-code-exec(79159)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79159"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4181",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3988

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79149	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334	vdb-entry, signature, x_refsource_OVAL
	http://osvdb.org/86109	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=725770	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.mozilla.org/security/announce/2012/mfsa2012-79.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.248Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "firefox-full-screen-code-exec(79149)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79149"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16334",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334"
          },
          {
            "name": "86109",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86109"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "firefox-full-screen-code-exec(79149)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79149"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16334",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334"
        },
        {
          "name": "86109",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86109"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3988",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "firefox-full-screen-code-exec(79149)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79149"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16334",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16334"
            },
            {
              "name": "86109",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86109"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=725770"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3988",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4188

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	x_refsource_CONFIRM
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/86096	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.mozilla.org/show_bug.cgi?id=787722	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79165	vdb-entry, x_refsource_XF

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "86096",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86096"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787722"
          },
          {
            "name": "oval:org.mitre.oval:def:16964",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          },
          {
            "name": "firefox-convolve3x3-bo(79165)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79165"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "86096",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86096"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787722"
        },
        {
          "name": "oval:org.mitre.oval:def:16964",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        },
        {
          "name": "firefox-convolve3x3-bo(79165)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79165"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4188",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "86096",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86096"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=787722",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787722"
            },
            {
              "name": "oval:org.mitre.oval:def:16964",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            },
            {
              "name": "firefox-convolve3x3-bo(79165)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79165"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4188",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4182

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16191	vdb-entry, signature, x_refsource_OVAL
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79160	vdb-entry, x_refsource_XF
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.mozilla.org/show_bug.cgi?id=788950	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN
	http://www.mozilla.org/security/announce/2012/mfsa2012-85.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.550Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16191",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16191"
          },
          {
            "name": "firefox-nstexteditrules-code-exec(79160)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79160"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=788950"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16191",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16191"
        },
        {
          "name": "firefox-nstexteditrules-code-exec(79160)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79160"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=788950"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4182",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16191",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16191"
            },
            {
              "name": "firefox-nstexteditrules-code-exec(79160)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79160"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=788950",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=788950"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4182",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4185

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16009	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/86116	vdb-entry, x_refsource_OSVDB
	https://bugzilla.mozilla.org/show_bug.cgi?id=785753	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79162	vdb-entry, x_refsource_XF
	http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/56127	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.584Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "oval:org.mitre.oval:def:16009",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16009"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "86116",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86116"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785753"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "firefox-nschartraitslength-bo(79162)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79162"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
          },
          {
            "name": "56127",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56127"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "oval:org.mitre.oval:def:16009",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16009"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "86116",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86116"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785753"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "firefox-nschartraitslength-bo(79162)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79162"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        },
        {
          "name": "56127",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56127"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4185",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "oval:org.mitre.oval:def:16009",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16009"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "86116",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86116"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=785753",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785753"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "firefox-nschartraitslength-bo(79162)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79162"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
            },
            {
              "name": "56127",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56127"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4185",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.584Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4180

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://osvdb.org/86099	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=785720	x_refsource_CONFIRM
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16428	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79158	vdb-entry, x_refsource_XF
	http://www.mozilla.org/security/announce/2012/mfsa2012-85.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.550Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "86099",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86099"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785720"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "oval:org.mitre.oval:def:16428",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16428"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          },
          {
            "name": "firefox-isprevcharinnode-bo(79158)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79158"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "86099",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86099"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785720"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "oval:org.mitre.oval:def:16428",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16428"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        },
        {
          "name": "firefox-isprevcharinnode-bo(79158)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79158"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4180",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "86099",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86099"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=785720",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785720"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "oval:org.mitre.oval:def:16428",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16428"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            },
            {
              "name": "firefox-isprevcharinnode-bo(79158)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79158"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4180",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3986

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=775868	x_refsource_CONFIRM
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-77.html	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/55922	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.183Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868"
          },
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16834",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "55922",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55922"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868"
        },
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16834",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "55922",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55922"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3986",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775868"
            },
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16834",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "55922",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55922"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3986",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.183Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4186

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16193	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/86117	vdb-entry, x_refsource_OSVDB
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	x_refsource_CONFIRM
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.mozilla.org/show_bug.cgi?id=785967	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79163	vdb-entry, x_refsource_XF
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "oval:org.mitre.oval:def:16193",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16193"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "86117",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86117"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785967"
          },
          {
            "name": "firefox-nswavereader-bo(79163)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "oval:org.mitre.oval:def:16193",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16193"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "86117",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86117"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785967"
        },
        {
          "name": "firefox-nswavereader-bo(79163)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4186",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "oval:org.mitre.oval:def:16193",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16193"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "86117",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86117"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=785967",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785967"
            },
            {
              "name": "firefox-nswavereader-bo(79163)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4186",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3990

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-87.html	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79172	vdb-entry, x_refsource_XF
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=787704	x_refsource_CONFIRM
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.208Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "firefox-nsicontent-code-exec(79172)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79172"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16642",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "firefox-nsicontent-code-exec(79172)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79172"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16642",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3990",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "firefox-nsicontent-code-exec(79172)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79172"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16642",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16642"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787704"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3990",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.208Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3995

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=765621	x_refsource_CONFIRM
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/56136	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79156	vdb-entry, x_refsource_XF
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-85.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.039Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "oval:org.mitre.oval:def:16808",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "56136",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56136"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "firefox-iscsswordspacingspace-code-exec(79156)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79156"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "oval:org.mitre.oval:def:16808",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "56136",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56136"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "firefox-iscsswordspacingspace-code-exec(79156)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79156"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3995",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765621"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "oval:org.mitre.oval:def:16808",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16808"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "56136",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56136"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "firefox-iscsswordspacingspace-code-exec(79156)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79156"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3995",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.039Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-1956

Vulnerability from cvelistv5

Published

2012-08-29 10:00

Modified

2024-08-06 19:17

Severity ?

Summary

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=756719	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/55260	vdb-entry, x_refsource_BID
	http://www.mozilla.org/security/announce/2012/mfsa2012-59.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1548-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1548-2	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html	vendor-advisory, x_refsource_SUSE

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.097Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:16367",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719"
          },
          {
            "name": "55260",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55260"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
          },
          {
            "name": "USN-1548-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-1"
          },
          {
            "name": "USN-1548-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1548-2"
          },
          {
            "name": "SUSE-SU-2012:1167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
          },
          {
            "name": "SUSE-SU-2012:1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
          },
          {
            "name": "openSUSE-SU-2012:1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:16367",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719"
        },
        {
          "name": "55260",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55260"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
        },
        {
          "name": "USN-1548-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-1"
        },
        {
          "name": "USN-1548-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1548-2"
        },
        {
          "name": "SUSE-SU-2012:1167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
        },
        {
          "name": "SUSE-SU-2012:1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
        },
        {
          "name": "openSUSE-SU-2012:1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1956",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:16367",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=756719"
            },
            {
              "name": "55260",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55260"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-59.html"
            },
            {
              "name": "USN-1548-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-1"
            },
            {
              "name": "USN-1548-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1548-2"
            },
            {
              "name": "SUSE-SU-2012:1167",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html"
            },
            {
              "name": "SUSE-SU-2012:1157",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html"
            },
            {
              "name": "openSUSE-SU-2012:1065",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1956",
    "datePublished": "2012-08-29T10:00:00",
    "dateReserved": "2012-03-30T00:00:00",
    "dateUpdated": "2024-08-06T19:17:27.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3991

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=783260	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/55930	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2012/mfsa2012-81.html	x_refsource_CONFIRM
	http://osvdb.org/86098	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.358Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "55930",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55930"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
          },
          {
            "name": "86098",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86098"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "oval:org.mitre.oval:def:16646",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "55930",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55930"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
        },
        {
          "name": "86098",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86098"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "oval:org.mitre.oval:def:16646",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3991",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783260"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "55930",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55930"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-81.html"
            },
            {
              "name": "86098",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86098"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "oval:org.mitre.oval:def:16646",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3991",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3992

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-84.html	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/56128	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.mozilla.org/show_bug.cgi?id=775009	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "oval:org.mitre.oval:def:16987",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "56128",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56128"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "oval:org.mitre.oval:def:16987",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "56128",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56128"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3992",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "oval:org.mitre.oval:def:16987",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "56128",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56128"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=775009"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3992",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4184

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-83.html	x_refsource_CONFIRM
	http://osvdb.org/86113	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=780370	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16946	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/56120	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79154	vdb-entry, x_refsource_XF
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.586Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
          },
          {
            "name": "86113",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86113"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=780370"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "oval:org.mitre.oval:def:16946",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16946"
          },
          {
            "name": "56120",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56120"
          },
          {
            "name": "firefox-cow-xss(79154)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79154"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
        },
        {
          "name": "86113",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86113"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=780370"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "oval:org.mitre.oval:def:16946",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16946"
        },
        {
          "name": "56120",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56120"
        },
        {
          "name": "firefox-cow-xss(79154)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79154"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4184",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
            },
            {
              "name": "86113",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86113"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=780370",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=780370"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "oval:org.mitre.oval:def:16946",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16946"
            },
            {
              "name": "56120",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56120"
            },
            {
              "name": "firefox-cow-xss(79154)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79154"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4184",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.586Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3994

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/86110	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=765527	x_refsource_CONFIRM
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/56118	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-82.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.251Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "86110",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86110"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "56118",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56118"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "oval:org.mitre.oval:def:16798",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "86110",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86110"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "56118",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56118"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "oval:org.mitre.oval:def:16798",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3994",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "86110",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86110"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=765527"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "56118",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56118"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "oval:org.mitre.oval:def:16798",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16798"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3994",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4179

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79157	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16882	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=785574	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN
	http://www.mozilla.org/security/announce/2012/mfsa2012-85.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.529Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "firefox-createcsspropertytxn-code-exec(79157)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79157"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "oval:org.mitre.oval:def:16882",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16882"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785574"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "firefox-createcsspropertytxn-code-exec(79157)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79157"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "oval:org.mitre.oval:def:16882",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16882"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785574"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4179",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "firefox-createcsspropertytxn-code-exec(79157)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79157"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "oval:org.mitre.oval:def:16882",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16882"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=785574",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=785574"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4179",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.529Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4183

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79161	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=786895	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/56140	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16850	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://osvdb.org/86095	vdb-entry, x_refsource_OSVDB
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2012/mfsa2012-85.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.544Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "firefox-domsvgtests-code-exec(79161)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79161"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=786895"
          },
          {
            "name": "56140",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56140"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "oval:org.mitre.oval:def:16850",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16850"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "86095",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86095"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "firefox-domsvgtests-code-exec(79161)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79161"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=786895"
        },
        {
          "name": "56140",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56140"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "oval:org.mitre.oval:def:16850",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16850"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "86095",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86095"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4183",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "firefox-domsvgtests-code-exec(79161)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79161"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=786895",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=786895"
            },
            {
              "name": "56140",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56140"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "oval:org.mitre.oval:def:16850",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16850"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "86095",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86095"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4183",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3993

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-83.html	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718	vdb-entry, signature, x_refsource_OVAL
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/79153	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/86111	vdb-entry, x_refsource_OSVDB
	https://bugzilla.mozilla.org/show_bug.cgi?id=768101	x_refsource_CONFIRM
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/56119	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.342Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16718",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "firefox-cow-privilege-escalation(79153)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79153"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "86111",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/86111"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "56119",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56119"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an \"XrayWrapper pollution\" issue."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16718",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "firefox-cow-privilege-escalation(79153)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79153"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "86111",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/86111"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "56119",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56119"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3993",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an \"XrayWrapper pollution\" issue."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16718",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "firefox-cow-privilege-escalation(79153)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79153"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "86111",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/86111"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=768101"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "56119",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56119"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3993",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-3982

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:21

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=794025	x_refsource_CONFIRM
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2012/dsa-2565	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/55924	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2012/dsa-2572	vendor-advisory, x_refsource_DEBIAN
	http://www.mozilla.org/security/announce/2012/mfsa2012-74.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/51181	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	https://bugzilla.mozilla.org/show_bug.cgi?id=790856	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2012/dsa-2569	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=783502	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:21:04.246Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "DSA-2565",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2565"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16612",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612"
          },
          {
            "name": "55924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/55924"
          },
          {
            "name": "DSA-2572",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2572"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "name": "51181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/51181"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "DSA-2569",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2569"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "DSA-2565",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2565"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "oval:org.mitre.oval:def:16612",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612"
        },
        {
          "name": "55924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/55924"
        },
        {
          "name": "DSA-2572",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2572"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "name": "51181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/51181"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "DSA-2569",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2569"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3982",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=794025"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "DSA-2565",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2565"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16612",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16612"
            },
            {
              "name": "55924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/55924"
            },
            {
              "name": "DSA-2572",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2572"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "51181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/51181"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=790856"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "DSA-2569",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2569"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=783502"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-3982",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-07-11T00:00:00",
    "dateUpdated": "2024-08-06T20:21:04.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2012-4187

Vulnerability from cvelistv5

Published

2012-10-10 17:00

Modified

2024-08-06 20:28

Severity ?

Summary

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/50904	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50984	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50935	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50856	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/50892	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2012-1351.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/50936	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2012/mfsa2012-86.html	x_refsource_CONFIRM
	http://secunia.com/advisories/55318	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2012:163	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/56125	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=787493	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-1611-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16425	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T20:28:07.557Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "RHSA-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
          },
          {
            "name": "50936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/50936"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
          },
          {
            "name": "55318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55318"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "MDVSA-2012:163",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
          },
          {
            "name": "56125",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56125"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787493"
          },
          {
            "name": "USN-1611-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          },
          {
            "name": "oval:org.mitre.oval:def:16425",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16425"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-10-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50904"
        },
        {
          "name": "50984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50984"
        },
        {
          "name": "50935",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50935"
        },
        {
          "name": "50856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50856"
        },
        {
          "name": "50892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50892"
        },
        {
          "name": "RHSA-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
        },
        {
          "name": "50936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/50936"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
        },
        {
          "name": "55318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55318"
        },
        {
          "name": "SUSE-SU-2012:1351",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
        },
        {
          "name": "MDVSA-2012:163",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
        },
        {
          "name": "56125",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56125"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787493"
        },
        {
          "name": "USN-1611-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1611-1"
        },
        {
          "name": "oval:org.mitre.oval:def:16425",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16425"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-4187",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "RHSA-2012:1351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1351.html"
            },
            {
              "name": "50936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/50936"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
            },
            {
              "name": "55318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/55318"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "MDVSA-2012:163",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:163"
            },
            {
              "name": "56125",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56125"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=787493",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=787493"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "oval:org.mitre.oval:def:16425",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16425"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-4187",
    "datePublished": "2012-10-10T17:00:00",
    "dateReserved": "2012-08-08T00:00:00",
    "dateUpdated": "2024-08-06T20:28:07.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature