Vulnerability-Lookup

RHSA-2012_1088

Vulnerability from csaf_redhat - Published: 2012-07-17 19:21 - Updated: 2024-11-22 05:33

Summary

Red Hat Security Advisory: firefox security update

Severity

Critical

Notes

Topic: Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-1948, CVE-2012-1951, CVE-2012-1952, CVE-2012-1953, CVE-2012-1954, CVE-2012-1958, CVE-2012-1962, CVE-2012-1967) A malicious web page could bypass same-compartment security wrappers (SCSW) and execute arbitrary code with chrome privileges. (CVE-2012-1959) A flaw in the context menu functionality in Firefox could allow a malicious website to bypass intended restrictions and allow a cross-site scripting attack. (CVE-2012-1966) A page different to that in the address bar could be displayed when dragging and dropping to the address bar, possibly making it easier for a malicious site or user to perform a phishing attack. (CVE-2012-1950) A flaw in the way Firefox called history.forward and history.back could allow an attacker to conceal a malicious URL, possibly tricking a user into believing they are viewing a trusted site. (CVE-2012-1955) A flaw in a parser utility class used by Firefox to parse feeds (such as RSS) could allow an attacker to execute arbitrary JavaScript with the privileges of the user running Firefox. This issue could have affected other browser components or add-ons that assume the class returns sanitized input. (CVE-2012-1957) A flaw in the way Firefox handled X-Frame-Options headers could allow a malicious website to perform a clickjacking attack. (CVE-2012-1961) A flaw in the way Content Security Policy (CSP) reports were generated by Firefox could allow a malicious web page to steal a victim's OAuth 2.0 access tokens and OpenID credentials. (CVE-2012-1963) A flaw in the way Firefox handled certificate warnings could allow a man-in-the-middle attacker to create a crafted warning, possibly tricking a user into accepting an arbitrary certificate as trusted. (CVE-2012-1964) A flaw in the way Firefox handled feed:javascript URLs could allow output filtering to be bypassed, possibly leading to a cross-site scripting attack. (CVE-2012-1965) The nss update RHBA-2012:0337 for Red Hat Enterprise Linux 5 and 6 introduced a mitigation for the CVE-2011-3389 flaw. For compatibility reasons, it remains disabled by default in the nss packages. This update makes Firefox enable the mitigation by default. It can be disabled by setting the NSS_SSL_CBC_RANDOM_IV environment variable to 0 before launching Firefox. (BZ#838879) For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 10.0.6 ESR. You can find a link to the Mozilla advisories in the References section of this erratum. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Benoit Jacob, Jesse Ruderman, Christian Holler, Bill McCloskey, Abhishek Arya, Arthur Gerkis, Bill Keese, moz_bug_r_a4, Bobby Holley, Code Audit Labs, Mariusz Mlynski, Mario Heiderich, Frédéric Buclin, Karthikeyan Bhargavan, Matt McCutchen, Mario Gomes, and Soroush Dalili as the original reporters of these issues. All Firefox users should upgrade to these updated packages, which contain Firefox version 10.0.6 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2012-1948

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products

Product	Version	Remediation
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-0:10.0.6-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-0:10.0.6-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:firefox-debuginfo-0:10.0.6-1.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-debuginfo-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.ppc64	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.s390	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.8.Z:xulrunner-devel-0:10.0.6-2.el5_8.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:firefox-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-debuginfo-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.3.z:xulrunner-devel-0:10.0.6-1.el6_3.x86_64	—	Vendor Fix fix

Threats

Impact Critical

CVE-2012-1950

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1951

Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

CVE-2012-1952

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

CVE-2012-1953

The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

CVE-2012-1954

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

CVE-2012-1955

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1957

An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1958

Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.

5.1 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1959

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

CVE-2012-1961

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1962

Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

CVE-2012-1963

The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1964

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1965

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1966

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Moderate

CVE-2012-1967

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 277 products, the same list as for CVE-2012-1948

Threats

Impact Critical

References

85 references

URL	Category
https://access.redhat.com/errata/RHSA-2012:1088	self
https://access.redhat.com/security/updates/classi…	external
http://www.mozilla.org/security/known-vulnerabili…	external
https://rhn.redhat.com/errata/RHBA-2012-0337.html	external
https://bugzilla.redhat.com/show_bug.cgi?id=838879	external
https://bugzilla.redhat.com/show_bug.cgi?id=840201	external
https://bugzilla.redhat.com/show_bug.cgi?id=840203	external
https://bugzilla.redhat.com/show_bug.cgi?id=840205	external
https://bugzilla.redhat.com/show_bug.cgi?id=840206	external
https://bugzilla.redhat.com/show_bug.cgi?id=840207	external
https://bugzilla.redhat.com/show_bug.cgi?id=840208	external
https://bugzilla.redhat.com/show_bug.cgi?id=840211	external
https://bugzilla.redhat.com/show_bug.cgi?id=840212	external
https://bugzilla.redhat.com/show_bug.cgi?id=840214	external
https://bugzilla.redhat.com/show_bug.cgi?id=840215	external
https://bugzilla.redhat.com/show_bug.cgi?id=840220	external
https://bugzilla.redhat.com/show_bug.cgi?id=840222	external
https://bugzilla.redhat.com/show_bug.cgi?id=840225	external
https://bugzilla.redhat.com/show_bug.cgi?id=840259	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2012-1948	self
https://bugzilla.redhat.com/show_bug.cgi?id=840201	external
https://www.cve.org/CVERecord?id=CVE-2012-1948	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1948	external
https://access.redhat.com/security/cve/CVE-2012-1950	self
https://bugzilla.redhat.com/show_bug.cgi?id=840203	external
https://www.cve.org/CVERecord?id=CVE-2012-1950	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1950	external
https://access.redhat.com/security/cve/CVE-2012-1951	self
https://bugzilla.redhat.com/show_bug.cgi?id=840205	external
https://www.cve.org/CVERecord?id=CVE-2012-1951	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1951	external
https://access.redhat.com/security/cve/CVE-2012-1952	self
https://www.cve.org/CVERecord?id=CVE-2012-1952	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1952	external
https://access.redhat.com/security/cve/CVE-2012-1953	self
https://www.cve.org/CVERecord?id=CVE-2012-1953	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1953	external
https://access.redhat.com/security/cve/CVE-2012-1954	self
https://www.cve.org/CVERecord?id=CVE-2012-1954	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1954	external
https://access.redhat.com/security/cve/CVE-2012-1955	self
https://bugzilla.redhat.com/show_bug.cgi?id=840206	external
https://www.cve.org/CVERecord?id=CVE-2012-1955	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1955	external
https://access.redhat.com/security/cve/CVE-2012-1957	self
https://bugzilla.redhat.com/show_bug.cgi?id=840208	external
https://www.cve.org/CVERecord?id=CVE-2012-1957	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1957	external
https://access.redhat.com/security/cve/CVE-2012-1958	self
https://bugzilla.redhat.com/show_bug.cgi?id=840211	external
https://www.cve.org/CVERecord?id=CVE-2012-1958	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1958	external
https://access.redhat.com/security/cve/CVE-2012-1959	self
https://bugzilla.redhat.com/show_bug.cgi?id=840212	external
https://www.cve.org/CVERecord?id=CVE-2012-1959	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1959	external
https://access.redhat.com/security/cve/CVE-2012-1961	self
https://bugzilla.redhat.com/show_bug.cgi?id=840214	external
https://www.cve.org/CVERecord?id=CVE-2012-1961	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1961	external
https://access.redhat.com/security/cve/CVE-2012-1962	self
https://bugzilla.redhat.com/show_bug.cgi?id=840215	external
https://www.cve.org/CVERecord?id=CVE-2012-1962	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1962	external
https://access.redhat.com/security/cve/CVE-2012-1963	self
https://bugzilla.redhat.com/show_bug.cgi?id=840220	external
https://www.cve.org/CVERecord?id=CVE-2012-1963	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1963	external
https://access.redhat.com/security/cve/CVE-2012-1964	self
https://bugzilla.redhat.com/show_bug.cgi?id=840222	external
https://www.cve.org/CVERecord?id=CVE-2012-1964	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1964	external
https://access.redhat.com/security/cve/CVE-2012-1965	self
https://bugzilla.redhat.com/show_bug.cgi?id=840225	external
https://www.cve.org/CVERecord?id=CVE-2012-1965	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1965	external
https://access.redhat.com/security/cve/CVE-2012-1966	self
https://bugzilla.redhat.com/show_bug.cgi?id=840207	external
https://www.cve.org/CVERecord?id=CVE-2012-1966	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1966	external
https://access.redhat.com/security/cve/CVE-2012-1967	self
https://bugzilla.redhat.com/show_bug.cgi?id=840259	external
https://www.cve.org/CVERecord?id=CVE-2012-1967	external
https://nvd.nist.gov/vuln/detail/CVE-2012-1967	external

Acknowledgments

Mozilla project

Benoit Jacob Jesse Ruderman Christian Holler Bill McCloskey

Mario Gomes research firm Code Audit Labs

Abhishek Arya

Mariusz Mlynski

Mario Heiderich

Mozilla developer Bobby Holley

Mozilla developer Frédéric Buclin

Bill Keese

Matt McCutchen

s Mario Gomes Soroush Dalili

moz_bug_r_a4

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2012-1961 (GCVE-0-2012-1961)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://secunia.com/advisories/49977	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/54584	vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1027256	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id?1027258	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=761655	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1510-1	vendor-advisoryx_refsource_UBUNTU
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1027257	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49994	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49968	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://osvdb.org/84003	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/49993	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.266Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54584"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "84003",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84003"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          },
          {
            "name": "oval:org.mitre.oval:def:16993",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54584"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "84003",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84003"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        },
        {
          "name": "oval:org.mitre.oval:def:16993",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1961",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54584",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54584"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=761655"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "84003",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84003"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            },
            {
              "name": "oval:org.mitre.oval:def:16993",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1961",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.266Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1962 (GCVE-0-2012-1962)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://secunia.com/advisories/49977	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/84004	vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1027256	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/54575	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id?1027258	vdb-entryx_refsource_SECTRACK
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1510-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1027257	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49994	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49968	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.mozilla.org/show_bug.cgi?id=764296	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49993	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.057Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "84004",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84004"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "54575",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54575"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "oval:org.mitre.oval:def:16729",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "84004",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84004"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "54575",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54575"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "oval:org.mitre.oval:def:16729",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1962",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "84004",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84004"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "54575",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54575"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "oval:org.mitre.oval:def:16729",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=764296"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1962",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1963 (GCVE-0-2012-1963)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://secunia.com/advisories/49977	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1027256	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id?1027258	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1510-1	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.mozilla.org/show_bug.cgi?id=767778	x_refsource_CONFIRM
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1027257	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://osvdb.org/84005	vdb-entryx_refsource_OSVDB
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49994	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49968	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/54582	vdb-entryx_refsource_BID
http://secunia.com/advisories/49993	third-party-advisoryx_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.277Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:17056",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056"
          },
          {
            "name": "84005",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84005"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "54582",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54582"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:17056",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056"
        },
        {
          "name": "84005",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84005"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "54582",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54582"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1963",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=767778"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "oval:org.mitre.oval:def:17056",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056"
            },
            {
              "name": "84005",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84005"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "54582",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54582"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1963",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.277Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1964 (GCVE-0-2012-1964)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
http://secunia.com/advisories/49977	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/54581	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=633691	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49994	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/49993	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/84011	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "54581",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54581"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "84011",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84011"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          },
          {
            "name": "oval:org.mitre.oval:def:16783",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "54581",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54581"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "84011",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84011"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        },
        {
          "name": "oval:org.mitre.oval:def:16783",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1964",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "54581",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54581"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=633691"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-54.html"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "84011",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84011"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            },
            {
              "name": "oval:org.mitre.oval:def:16783",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1964",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.146Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1965 (GCVE-0-2012-1965)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=758990	x_refsource_CONFIRM
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1027256	vdb-entryx_refsource_SECTRACK
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/84012	vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/54579	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.321Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758990"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-55.html"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "oval:org.mitre.oval:def:17001",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17001"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "84012",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84012"
          },
          {
            "name": "54579",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54579"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758990"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-55.html"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "oval:org.mitre.oval:def:17001",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17001"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "84012",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84012"
        },
        {
          "name": "54579",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54579"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1965",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=758990",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758990"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-55.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-55.html"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "oval:org.mitre.oval:def:17001",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17001"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "84012",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84012"
            },
            {
              "name": "54579",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54579"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1965",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.321Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1966 (GCVE-0-2012-1966)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2514	vendor-advisoryx_refsource_DEBIAN
http://www.securitytracker.com/id?1027256	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://osvdb.org/84009	vdb-entryx_refsource_OSVDB
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/54577	vdb-entryx_refsource_BID
https://bugzilla.mozilla.org/show_bug.cgi?id=734076	x_refsource_CONFIRM
http://secunia.com/advisories/49964	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.186Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "name": "DSA-2514",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2514"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "oval:org.mitre.oval:def:17037",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17037"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "84009",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84009"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-46.html"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "54577",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54577"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=734076"
          },
          {
            "name": "49964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49964"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "name": "DSA-2514",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2514"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "oval:org.mitre.oval:def:17037",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17037"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "84009",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84009"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-46.html"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "54577",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54577"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=734076"
        },
        {
          "name": "49964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49964"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1966",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "DSA-2514",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2514"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "oval:org.mitre.oval:def:17037",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17037"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "84009",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84009"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-46.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-46.html"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "54577",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54577"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=734076",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=734076"
            },
            {
              "name": "49964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49964"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1966",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.186Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2012-1967 (GCVE-0-2012-1967)

Vulnerability from cvelistv5 – Published: 2012-07-18 10:00 – Updated: 2024-08-06 19:17

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

28 references

URL	Tags
http://secunia.com/advisories/49977	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49992	third-party-advisoryx_refsource_SECUNIA
http://www.mozilla.org/security/announce/2012/mfs…	x_refsource_CONFIRM
http://www.debian.org/security/2012/dsa-2514	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2012/dsa-2528	vendor-advisoryx_refsource_DEBIAN
http://www.securitytracker.com/id?1027256	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2012-1088.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/49963	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/84013	vdb-entryx_refsource_OSVDB
http://www.ubuntu.com/usn/USN-1509-2	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id?1027258	vdb-entryx_refsource_SECTRACK
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/49979	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-1510-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49965	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1027257	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/54573	vdb-entryx_refsource_BID
https://bugzilla.mozilla.org/show_bug.cgi?id=758344	x_refsource_CONFIRM
http://secunia.com/advisories/49964	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49994	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/49968	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-1509-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/49993	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/49972	third-party-advisoryx_refsource_SECUNIA

Date Public

2012-07-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T19:17:27.258Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "49977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49977"
          },
          {
            "name": "49992",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49992"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"
          },
          {
            "name": "DSA-2514",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2514"
          },
          {
            "name": "DSA-2528",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2528"
          },
          {
            "name": "1027256",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027256"
          },
          {
            "name": "RHSA-2012:1088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
          },
          {
            "name": "49963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49963"
          },
          {
            "name": "84013",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/84013"
          },
          {
            "name": "USN-1509-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-2"
          },
          {
            "name": "1027258",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027258"
          },
          {
            "name": "oval:org.mitre.oval:def:17025",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025"
          },
          {
            "name": "49979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49979"
          },
          {
            "name": "SUSE-SU-2012:0895",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
          },
          {
            "name": "USN-1510-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1510-1"
          },
          {
            "name": "49965",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49965"
          },
          {
            "name": "1027257",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1027257"
          },
          {
            "name": "openSUSE-SU-2012:0917",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
          },
          {
            "name": "54573",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/54573"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344"
          },
          {
            "name": "49964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49964"
          },
          {
            "name": "SUSE-SU-2012:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
          },
          {
            "name": "49994",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49994"
          },
          {
            "name": "openSUSE-SU-2012:0899",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
          },
          {
            "name": "49968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49968"
          },
          {
            "name": "USN-1509-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1509-1"
          },
          {
            "name": "49993",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49993"
          },
          {
            "name": "49972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/49972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-28T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "49977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49977"
        },
        {
          "name": "49992",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49992"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"
        },
        {
          "name": "DSA-2514",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2514"
        },
        {
          "name": "DSA-2528",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2528"
        },
        {
          "name": "1027256",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027256"
        },
        {
          "name": "RHSA-2012:1088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
        },
        {
          "name": "49963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49963"
        },
        {
          "name": "84013",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/84013"
        },
        {
          "name": "USN-1509-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-2"
        },
        {
          "name": "1027258",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027258"
        },
        {
          "name": "oval:org.mitre.oval:def:17025",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025"
        },
        {
          "name": "49979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49979"
        },
        {
          "name": "SUSE-SU-2012:0895",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
        },
        {
          "name": "USN-1510-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1510-1"
        },
        {
          "name": "49965",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49965"
        },
        {
          "name": "1027257",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1027257"
        },
        {
          "name": "openSUSE-SU-2012:0917",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
        },
        {
          "name": "54573",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/54573"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344"
        },
        {
          "name": "49964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49964"
        },
        {
          "name": "SUSE-SU-2012:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
        },
        {
          "name": "49994",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49994"
        },
        {
          "name": "openSUSE-SU-2012:0899",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
        },
        {
          "name": "49968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49968"
        },
        {
          "name": "USN-1509-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1509-1"
        },
        {
          "name": "49993",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49993"
        },
        {
          "name": "49972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/49972"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-1967",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "49977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49977"
            },
            {
              "name": "49992",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49992"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"
            },
            {
              "name": "DSA-2514",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2514"
            },
            {
              "name": "DSA-2528",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2528"
            },
            {
              "name": "1027256",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027256"
            },
            {
              "name": "RHSA-2012:1088",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1088.html"
            },
            {
              "name": "49963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49963"
            },
            {
              "name": "84013",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/84013"
            },
            {
              "name": "USN-1509-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-2"
            },
            {
              "name": "1027258",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027258"
            },
            {
              "name": "oval:org.mitre.oval:def:17025",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025"
            },
            {
              "name": "49979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49979"
            },
            {
              "name": "SUSE-SU-2012:0895",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html"
            },
            {
              "name": "USN-1510-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1510-1"
            },
            {
              "name": "49965",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49965"
            },
            {
              "name": "1027257",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1027257"
            },
            {
              "name": "openSUSE-SU-2012:0917",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html"
            },
            {
              "name": "54573",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/54573"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=758344"
            },
            {
              "name": "49964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49964"
            },
            {
              "name": "SUSE-SU-2012:0896",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html"
            },
            {
              "name": "49994",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49994"
            },
            {
              "name": "openSUSE-SU-2012:0899",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html"
            },
            {
              "name": "49968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49968"
            },
            {
              "name": "USN-1509-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1509-1"
            },
            {
              "name": "49993",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49993"
            },
            {
              "name": "49972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/49972"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-1967",
    "datePublished": "2012-07-18T10:00:00.000Z",
    "dateReserved": "2012-03-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T19:17:27.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2012_1088

CVE-2012-1961 (GCVE-0-2012-1961)

CVE-2012-1962 (GCVE-0-2012-1962)

CVE-2012-1963 (GCVE-0-2012-1963)

CVE-2012-1964 (GCVE-0-2012-1964)

CVE-2012-1965 (GCVE-0-2012-1965)

CVE-2012-1966 (GCVE-0-2012-1966)

CVE-2012-1967 (GCVE-0-2012-1967)

Tags

Sightings

Nomenclature

Related by attack behaviour