Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
itional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48110 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00013.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:017 - https://bugzilla.mozilla.org/show_bug.cgi?id=724284 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:018 - http://secunia.com/advisories/49055 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00012.html - http://www.ubuntu.com/usn/USN-1360-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15017 - http://www.securityfocus.com/bid/51975 - http://www.mozilla.org/security/announce/2012/m
Aorg.mitre.oval%3Adef%3A15017 - http://www.securityfocus.com/bid/51975 - http://www.mozilla.org/security/announce/2012/mfsa2012-10.html
CVE ID: CVE-2012-0453 State: PUBLISHED Published: 2012-02-25T02:00:00 Last Updated: 2024-08-06T18:23:30.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when mod_perl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=725663 - http://www.bugzilla.org/security/4.0.4/ - http://www.securitytracker.com/id?1026737
CVE ID: CVE-2012-0454 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library. Additional Analyst Notes: - CVE Program Container: Ref
Unknown_QueryService function in the Windows shlwapi.dll library. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48402 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14258 - http://secunia.com/advisories/48629 - http://www.mozilla.org/security/announce/2012/mfsa2012-12.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48561 - http://www.securitytracker.com/id?1026801 - https://bugzilla.mozilla.org/show_bug.cgi?id=684555 - http://www
ies/48561 - http://www.securitytracker.com/id?1026801 - https://bugzilla.mozilla.org/show_bug.cgi?id=684555 - http://www.securitytracker.com/id?1026804
CVE ID: CVE-2012-0455 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:30.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-
issue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - https://bugzilla.mozilla.org/show_bug.cgi?id=704354 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.mozilla.
tu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.mozilla.org/security/announce/2012/mfsa2012-13.html - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://www.securityfocus.com/bid/52458 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14829 - http://www.debian.org/security/2012/dsa-2433 - http://www.mandriva.co
h/definition/oval%3Aorg.mitre.oval%3Adef%3A14829 - http://www.debian.org/security/2012/dsa-2433 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0456 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http:/
ences: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://l
u.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - http://www.mozilla.org/security/announce/2012/mfsa2012-14.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15007 - http://www.debian.org/security/2012/dsa-2433 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48
032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - https://bugzilla.mozilla.org/show_bug.cgi?id=711653 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0457 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/484
iner: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14775 - https://bugzilla.mozilla.org/show_bug.cgi?id=720103 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia
unia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - http://www.mozilla.org/security/announce/2012/mfsa2012-14.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/adv
m/advisories/48495 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0458 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context. Additional Analyst Notes: - CVE Program Container: Re
URL that is later interpreted in the about:sessionrestore context. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-16.html - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://www.securityfocus.com/bid/52460 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/u
m/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - https://bugzilla.mozilla.org/show_bug.cgi?id=723808 - http://secunia.com/advisories/48629 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15122 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - https://bugzilla.mozilla.org/show_bug.cgi?id=718203 - https://bugzilla.mozilla.org/show_bug.cgi?id=719994 - http://www.ubuntu.com/usn
lla.mozilla.org/show_bug.cgi?id=718203 - https://bugzilla.mozilla.org/show_bug.cgi?id=719994 - http://www.ubuntu.com/usn/USN-1400-2 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - http://www.debian.org/security/2012/dsa-2433 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48
http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0459 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.h
onal Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48359 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - https://bugzilla.mozilla.org/show_bug.cgi?id=723446 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15066 - http://secunia.com/advisories/49055 - http://www.ubuntu.com/usn/USN-1400-2 - http://www.mozilla.org/security/announce/2012/mfsa2012-17.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0460 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://lists.opensuse.org/opensuse-security-announce
dates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48359 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.mozilla.org/security/announce/2012/mfsa2012-18.html - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114 - http://secunia.com/advisories/49055 - http://www.ubuntu.com/usn/USN-1400-2 - http://www.mandriva.com/security/adv
5114 - http://secunia.com/advisories/49055 - http://www.ubuntu.com/usn/USN-1400-2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - https://bugzilla.mozilla.org/show_bug.cgi?id=727303 - http://www.securitytracker.com/id?1026801 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0461 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.ht
nal Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48414 - http://secunia.com/advisories/48359 - http://secunia.com/advisories/48823 - http://www.ubuntu.com/usn/USN-1401-1 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html
//secunia.com/advisories/48629 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - http://secunia.com/advisories/48496 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - https://bugzilla.mozilla.org/show_bug.cgi?id=730425 - http://www.mozilla.org/security/announce/2012/mfsa2012-19.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.debian.org/security/2012/dsa-2458 - http://secunia.com/advisories/48920 - https://bugzilla.mozilla.org/show_bug.cgi?id=657588 - http://www.debian.org/security/2012/dsa-2433 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://s
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48495 - http://secunia.com/advisories/48553 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15009 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0462 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/4
tainer: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://www.ubuntu.com/usn/USN-1400-5 - http://secunia.com/advisories/48359 - https://bugzilla.mozilla.org/show_bug.cgi?id=714590 - http://www.ubuntu.com/usn/USN-1400-4 - http://secunia.com/advisories/48629 - https://bugzilla.mozilla.org/show_bug.cgi?id=718516 - http://www.ubuntu.com/usn/USN-1400-3 - http://rhn.redhat.com/errata/RHSA-2012-0387.html - https://bugzilla.mozilla.org/show_bug.cgi?id=705855 - https://bugzilla.mozilla.org/show_bug.cgi?id=699033
2-0387.html - https://bugzilla.mozilla.org/show_bug.cgi?id=705855 - https://bugzilla.mozilla.org/show_bug.cgi?id=699033 - http://secunia.com/advisories/48496 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - https://bugzilla.mozilla.org/show_bug.cgi?id=727330 - https://bugzilla.mozilla.org/show_bug.cgi?id=720380 - http://www.mozilla.org/security/announce/2012/mfsa2012-19.html - http://www.ubuntu.com/usn/USN-1400-2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:032 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15012 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48553 - https://
rg.mitre.oval%3Adef%3A15012 - http://www.securitytracker.com/id?1026803 - http://secunia.com/advisories/48553 - https://bugzilla.mozilla.org/show_bug.cgi?id=701269 - http://www.ubuntu.com/usn/USN-1400-1 - http://secunia.com/advisories/48561 - http://rhn.redhat.com/errata/RHSA-2012-0388.html - http://www.securitytracker.com/id?1026801 - https://bugzilla.mozilla.org/show_bug.cgi?id=718202 - https://bugzilla.mozilla.org/show_bug.cgi?id=712572 - http://www.securitytracker.com/id?1026804 - http://secunia.com/advisories/48513
CVE ID: CVE-2012-0463 State: PUBLISHED Published: 2012-03-14T19:00:00 Last Updated: 2024-08-06T18:23:31.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android. Additional Anal
h) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html - http://secunia.com/advisories/48402 - http://secunia.com/advisories/48624 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html - http://secunia.com/advisories/48629 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html - http://www.mozilla.org/security/announce/2012/mfsa2012-19.html - https://bugzilla.mozilla.org/show_bug.cgi?id=688208 - http://www.securitytracker.com/id?1026803 - http://www.securityfocus.com/bid