{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Mozilla Firefox ESR 10.0.9",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird 16.0.1",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Firefox 16.0.1",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird ESR 10.0.9",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla SeaMonkey 2.13.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-4184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4184"
    },
    {
      "name": "CVE-2012-4183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4183"
    },
    {
      "name": "CVE-2012-4179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4179"
    },
    {
      "name": "CVE-2012-4181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4181"
    },
    {
      "name": "CVE-2012-4188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4188"
    },
    {
      "name": "CVE-2012-3985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3985"
    },
    {
      "name": "CVE-2012-3992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3992"
    },
    {
      "name": "CVE-2012-4193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4193"
    },
    {
      "name": "CVE-2012-4185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4185"
    },
    {
      "name": "CVE-2012-3995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3995"
    },
    {
      "name": "CVE-2012-4192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4192"
    },
    {
      "name": "CVE-2012-3994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3994"
    },
    {
      "name": "CVE-2012-4187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4187"
    },
    {
      "name": "CVE-2012-3984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3984"
    },
    {
      "name": "CVE-2012-3982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3982"
    },
    {
      "name": "CVE-2012-4190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4190"
    },
    {
      "name": "CVE-2012-3989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3989"
    },
    {
      "name": "CVE-2012-3977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3977"
    },
    {
      "name": "CVE-2012-4191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4191"
    },
    {
      "name": "CVE-2012-4182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4182"
    },
    {
      "name": "CVE-2012-4186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4186"
    },
    {
      "name": "CVE-2012-3988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3988"
    },
    {
      "name": "CVE-2012-3987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3987"
    },
    {
      "name": "CVE-2012-3986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3986"
    },
    {
      "name": "CVE-2012-3993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3993"
    },
    {
      "name": "CVE-2012-3991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3991"
    },
    {
      "name": "CVE-2012-3983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3983"
    },
    {
      "name": "CVE-2012-4180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4180"
    },
    {
      "name": "CVE-2012-3990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-84 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-87 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-81 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-83 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-78 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-78.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-74 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-77 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-85 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-79 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-80 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-80.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla    2012/mfsa2012-73 du 21 septembre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-73.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-75 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-88 du    11 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-88.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-86 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-89 du    11 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-89.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-76 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-76.html"
    }
  ],
  "reference": "CERTA-2012-AVI-561",
  "revisions": [
    {
      "description": "version initiale ;",
      "revision_date": "2012-10-10T00:00:00.000000"
    },
    {
      "description": "ajout de deux bulletins.",
      "revision_date": "2012-10-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eMozilla\u003c/span\u003e. La majorit\u00e9 d\u0027entre elles sont\nconsid\u00e9r\u00e9es comme \u00ab Critiques \u00bb par l\u0027\u00e9diteur. Parmi elles plusieurs\nutilisations de donn\u00e9es apr\u00e8s lib\u00e9ration (use-after-free) sont pr\u00e9sentes\net peuvent mener \u00e0 des ex\u00e9cutions de codes arbitraires \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 Mozilla MFSA2012-73 \u00e0 MFSA2012-87",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Mozilla Firefox ESR 10.0.9",
      "product": {
        "name": "Firefox ESR",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird 16.0.1",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Firefox 16.0.1",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla Thunderbird ESR 10.0.9",
      "product": {
        "name": "Thunderbird",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Mozilla SeaMonkey 2.13.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-4184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4184"
    },
    {
      "name": "CVE-2012-4183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4183"
    },
    {
      "name": "CVE-2012-4179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4179"
    },
    {
      "name": "CVE-2012-4181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4181"
    },
    {
      "name": "CVE-2012-4188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4188"
    },
    {
      "name": "CVE-2012-3985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3985"
    },
    {
      "name": "CVE-2012-3992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3992"
    },
    {
      "name": "CVE-2012-4193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4193"
    },
    {
      "name": "CVE-2012-4185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4185"
    },
    {
      "name": "CVE-2012-3995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3995"
    },
    {
      "name": "CVE-2012-4192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4192"
    },
    {
      "name": "CVE-2012-3994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3994"
    },
    {
      "name": "CVE-2012-4187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4187"
    },
    {
      "name": "CVE-2012-3984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3984"
    },
    {
      "name": "CVE-2012-3982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3982"
    },
    {
      "name": "CVE-2012-4190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4190"
    },
    {
      "name": "CVE-2012-3989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3989"
    },
    {
      "name": "CVE-2012-3977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3977"
    },
    {
      "name": "CVE-2012-4191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4191"
    },
    {
      "name": "CVE-2012-4182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4182"
    },
    {
      "name": "CVE-2012-4186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4186"
    },
    {
      "name": "CVE-2012-3988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3988"
    },
    {
      "name": "CVE-2012-3987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3987"
    },
    {
      "name": "CVE-2012-3986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3986"
    },
    {
      "name": "CVE-2012-3993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3993"
    },
    {
      "name": "CVE-2012-3991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3991"
    },
    {
      "name": "CVE-2012-3983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3983"
    },
    {
      "name": "CVE-2012-4180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4180"
    },
    {
      "name": "CVE-2012-3990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-84 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-84.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-87 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-87.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-81 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-82.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-83 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-83.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-78 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-78.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-74 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-74.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-77 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-77.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-85 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-85.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-79 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-79.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-80 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-80.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla    2012/mfsa2012-73 du 21 septembre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-73.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-75 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-88 du    11 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-88.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-86 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-86.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-89 du    11 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-89.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-76 du    09 octobre 2012 :",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-76.html"
    }
  ],
  "reference": "CERTA-2012-AVI-561",
  "revisions": [
    {
      "description": "version initiale ;",
      "revision_date": "2012-10-10T00:00:00.000000"
    },
    {
      "description": "ajout de deux bulletins.",
      "revision_date": "2012-10-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eMozilla\u003c/span\u003e. La majorit\u00e9 d\u0027entre elles sont\nconsid\u00e9r\u00e9es comme \u00ab Critiques \u00bb par l\u0027\u00e9diteur. Parmi elles plusieurs\nutilisations de donn\u00e9es apr\u00e8s lib\u00e9ration (use-after-free) sont pr\u00e9sentes\net peuvent mener \u00e0 des ex\u00e9cutions de codes arbitraires \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Mozilla",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 Mozilla MFSA2012-73 \u00e0 MFSA2012-87",
      "url": null
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "98C70070-253F-4D0B-8717-85E7FA089D20",
              "versionEndExcluding": "16.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "751D51E0-7240-4385-BB86-5F0619B79491",
              "versionEndExcluding": "2.13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8064CC14-2AA6-4631-946B-0915E7204835",
              "versionEndExcluding": "16.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9BD9DD2-B468-4732-ABB1-742D83709B54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF49D26F-142E-468B-87C1-BABEA445255C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4174F4F-149E-41A6-BBCC-D01114C05F38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "8D305F7A-D159-4716-AB26-5E38BB5CD991",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "F0545634-EC4A-48E8-AB3D-49802FB11758",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "00720D8C-3FF3-4B1C-B74B-91F01A544399",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*",
              "matchCriteriaId": "D1D7B467-58DD-45F1-9F1F-632620DF072A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*",
              "matchCriteriaId": "DB4D6749-81A1-41D7-BF4F-1C45A7F49A22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:-:*:*:*",
              "matchCriteriaId": "1A9E2971-0D30-4A8D-8BF8-99E4E9E4CF86",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element\u0027s menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling."
    },
    {
      "lang": "es",
      "value": "Mozilla Firefox v16.0, Thunderbird antes de v16.0, y SeaMonkey antes de v2.13, no controla correctamente la navegaci\u00f3n m\u00e1s all\u00e1 de una p\u00e1gina web que tiene activo un elemento de men\u00fa SELECT, lo que permite a atacantes remotos falsificar contenido de la p\u00e1gina a trav\u00e9s de vectores relacionados con el posicionamiento absoluto y el desplazamiento."
    }
  ],
  "id": "CVE-2012-3984",
  "lastModified": "2026-06-16T23:44:12.317",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2012-10-10T17:55:01.567",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50856"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50892"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50904"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50935"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50984"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-1611-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50856"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50892"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50904"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50935"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/50984"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-1611-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2012-3984"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-10-10T17:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element\u0027s menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.",
  "id": "GHSA-m3hq-4m6f-jcr6",
  "modified": "2022-05-13T01:18:04Z",
  "published": "2022-05-13T01:18:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3984"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/50856"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/50892"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/50904"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/50935"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/50984"
    },
    {
      "type": "WEB",
      "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1611-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2012-3984",
    "description": "Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element\u0027s menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.",
    "id": "GSD-2012-3984",
    "references": [
      "https://www.suse.com/security/cve/CVE-2012-3984.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2012-3984"
      ],
      "details": "Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element\u0027s menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.",
      "id": "GSD-2012-3984",
      "modified": "2023-12-13T01:20:20.871333Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2012-3984",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element\u0027s menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "50904",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/50904"
          },
          {
            "name": "50984",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/50984"
          },
          {
            "name": "50935",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/50935"
          },
          {
            "name": "50856",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/50856"
          },
          {
            "name": "50892",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/50892"
          },
          {
            "name": "oval:org.mitre.oval:def:16184",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184"
          },
          {
            "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html",
            "refsource": "CONFIRM",
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
          },
          {
            "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294"
          },
          {
            "name": "SUSE-SU-2012:1351",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
          },
          {
            "name": "USN-1611-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-1611-1"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2.13",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:-:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-3984"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element\u0027s menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-75.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=575294"
            },
            {
              "name": "USN-1611-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-1611-1"
            },
            {
              "name": "SUSE-SU-2012:1351",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html"
            },
            {
              "name": "50984",
              "refsource": "SECUNIA",
              "tags": [
                "Broken Link"
              ],
              "url": "http://secunia.com/advisories/50984"
            },
            {
              "name": "50904",
              "refsource": "SECUNIA",
              "tags": [
                "Broken Link"
              ],
              "url": "http://secunia.com/advisories/50904"
            },
            {
              "name": "50935",
              "refsource": "SECUNIA",
              "tags": [
                "Broken Link"
              ],
              "url": "http://secunia.com/advisories/50935"
            },
            {
              "name": "50856",
              "refsource": "SECUNIA",
              "tags": [
                "Broken Link"
              ],
              "url": "http://secunia.com/advisories/50856"
            },
            {
              "name": "50892",
              "refsource": "SECUNIA",
              "tags": [
                "Broken Link"
              ],
              "url": "http://secunia.com/advisories/50892"
            },
            {
              "name": "oval:org.mitre.oval:def:16184",
              "refsource": "OVAL",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2020-08-26T19:36Z",
      "publishedDate": "2012-10-10T17:55Z"
    }
  }
}