Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4185 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:28:07.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/a
.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16009 - http://secunia.com/advisories/50892 - http://osvdb.org/86116 - https://bugzilla.mozilla.org/show_bug.cgi?id=785753 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79162 - http://www.mozilla.org/security/announce/2012/mfsa2012-86.html - http://www.securityfocus.com/bid/56127 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/201
rityfocus.com/bid/56127 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-4186 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:28:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://oval.cisecurity.org/repository/search/definiti
unia.com/advisories/50984 - http://secunia.com/advisories/50935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16193 - http://secunia.com/advisories/50856 - http://www.debian.org/security/2012/dsa-2565 - http://secunia.com/advisories/50892 - http://osvdb.org/86117 - http://www.debian.org/security/2012/dsa-2572 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://www.mozilla.org/security/announce/2012/mfsa2012-86.html - http://secunia.com/advisories/51181 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advi
318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - https://bugzilla.mozilla.org/show_bug.cgi?id=785967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79163 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.debian.org/security/2012/dsa-2569
CVE ID: CVE-2012-4187 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:28:07.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935
nces: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http://secunia.com/advisories/50892 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://www.mozilla.org/security/announce/2012/mfsa2012-86.html - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - http://www.securityfocus.com/bid/56125 - https://bugzilla.mozilla.org/show_bug.cgi?id=787493 - http://www.ubuntu.com/usn/USN-1611-1 - https://oval.cisecurity.org/repos
//bugzilla.mozilla.org/show_bug.cgi?id=787493 - http://www.ubuntu.com/usn/USN-1611-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16425
CVE ID: CVE-2012-4188 State: PUBLISHED Published: 2012-10-10T17:00:00 Last Updated: 2024-08-06T20:28:07.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http://www.debian.org/security/201
s/50984 - http://secunia.com/advisories/50935 - http://secunia.com/advisories/50856 - http://www.debian.org/security/2012/dsa-2565 - http://secunia.com/advisories/50892 - http://www.debian.org/security/2012/dsa-2572 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - http://secunia.com/advisories/50936 - http://www.mozilla.org/security/announce/2012/mfsa2012-86.html - http://secunia.com/advisories/51181 - http://osvdb.org/86096 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 - https://bugzilla.mozilla.org/show_bug.cgi?id=787722 - https://oval.cisecurity.org/re
ty/advisories?name=MDVSA-2012:163 - https://bugzilla.mozilla.org/show_bug.cgi?id=787722 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16964 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.debian.org/security/2012/dsa-2569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79165
CVE ID: CVE-2012-4189 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T20:28:07.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version field. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=790296 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - http://www.bugzilla.org/security/3.6.11/
CVE ID: CVE-2012-4190 State: PUBLISHED Published: 2012-10-12T10:00:00 Last Updated: 2024-08-06T20:28:07.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79208 - https://bugzilla.mozilla.org/show_bug.cgi?id=790139 - http://www.mozilla.org/security/announce/2012/mfsa2012-88.ht
208 - https://bugzilla.mozilla.org/show_bug.cgi?id=790139 - http://www.mozilla.org/security/announce/2012/mfsa2012-88.html - http://www.securitytracker.com/id?1027653
CVE ID: CVE-2012-4191 State: PUBLISHED Published: 2012-10-12T10:00:00 Last Updated: 2024-08-06T20:28:07.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - https://oval.cisecurity.org/repository/search/definition/oval%
/advisories/50904 - http://secunia.com/advisories/50984 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16719 - https://bugzilla.mozilla.org/show_bug.cgi?id=798045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79209 - http://osvdb.org/86125 - http://www.ubuntu.com/usn/USN-1608-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-88.html - http://secunia.com/advisories/50929 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.securitytracker.com/id?1027653
CVE ID: CVE-2012-4192 State: PUBLISHED Published: 2012-10-12T10:00:00 Last Updated: 2024-08-06T20:28:07.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-89.html - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17095 - https://bugzi
ies/50984 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17095 - https://bugzilla.mozilla.org/show_bug.cgi?id=799952 - http://www.ubuntu.com/usn/USN-1608-1 - http://secunia.com/advisories/55318 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79210 - http://secunia.com/advisories/50929 - http://www.ubuntu.com/usn/USN-1611-1 - http://www.thespanner.co.uk/2012/10/10/firefox-knows-what-your-friends-did-last-summer/
CVE ID: CVE-2012-4193 State: PUBLISHED Published: 2012-10-12T10:00:00 Last Updated: 2024-08-06T20:28:07.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/m
b site. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-89.html - http://secunia.com/advisories/50904 - http://secunia.com/advisories/50984 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16786 - http://rhn.redhat.com/errata/RHSA-2012-1361.html - http://secunia.com/advisories/50907 - http://rhn.redhat.com/errata/RHSA-2012-1362.html - http://secunia.com/advisories/55318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79211 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html - http://secunia.com/advisories/50964 - https://bugzilla.mozilla.org/show_bug
se-security-announce/2012-10/msg00010.html - http://secunia.com/advisories/50964 - https://bugzilla.mozilla.org/show_bug.cgi?id=720619 - http://secunia.com/advisories/50906 - http://www.ubuntu.com/usn/USN-1611-1
CVE ID: CVE-2012-4194 State: PUBLISHED Published: 2012-10-29T18:00:00 Last Updated: 2024-08-06T20:28:07.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51144 - http://www.securityfocus.com/bid/56301 - http://lists.open
ontainer: References: - http://secunia.com/advisories/51144 - http://www.securityfocus.com/bid/56301 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00025.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16918 - http://secunia.com/advisories/51123 - http://secunia.com/advisories/51121 - http://secunia.com/advisories/51147 - https://bugzilla.mozilla.org/show_bug.cgi?id=800666 - http://www.ubuntu.com/usn/USN-1620-1 - http://rhn.redhat.com/errata/RHSA-2012-1407.html - http://secunia.com/advisories/51127 - http://secunia.com/advisories/55318 - http://www.mozilla.org/security/announce/2012/mfsa2012-90.html - http://www.ubuntu.com/usn/
cunia.com/advisories/55318 - http://www.mozilla.org/security/announce/2012/mfsa2012-90.html - http://www.ubuntu.com/usn/USN-1620-2 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html - http://secunia.com/advisories/51165 - http://rhn.redhat.com/errata/RHSA-2012-1413.html - http://secunia.com/advisories/51146
CVE ID: CVE-2012-4195 State: PUBLISHED Published: 2012-10-29T18:00:00 Last Updated: 2024-08-06T20:28:07.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior. Additional Analyst Notes:
r remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51144 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00025.html - http://secunia.com/advisories/51123 - https://bugzilla.mozilla.org/show_bug.cgi?id=793121 - http://secunia.com/advisories/51121 - http://secunia.com/advisories/51147 - http://www.ubuntu.com/usn/USN-1620-1 - http://rhn.redhat.com/errata/RHSA-2012-1407.html - http://secunia.com/advisories/51127 - http://www.securityfocus.com/bid/56302 - http://secunia.com/advisories/55318 - http://www.mozilla.org/security/announce/2012/mfsa
w.securityfocus.com/bid/56302 - http://secunia.com/advisories/55318 - http://www.mozilla.org/security/announce/2012/mfsa2012-90.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16856 - http://www.ubuntu.com/usn/USN-1620-2 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html - http://secunia.com/advisories/51165 - http://rhn.redhat.com/errata/RHSA-2012-1413.html - http://secunia.com/advisories/51146
CVE ID: CVE-2012-4196 State: PUBLISHED Published: 2012-10-29T18:00:00 Last Updated: 2024-08-06T20:28:07.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16962 - http://secunia.com/advisories
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16962 - http://secunia.com/advisories/51144 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00025.html - http://secunia.com/advisories/51123 - http://secunia.com/advisories/51121 - http://secunia.com/advisories/51147 - http://www.securityfocus.com/bid/56306 - http://www.ubuntu.com/usn/USN-1620-1 - http://rhn.redhat.com/errata/RHSA-2012-1407.html - http://secunia.com/advisories/51127 - http://secunia.com/advisories/55318 - http://www.mozilla.org/security/announce/2012/mfsa2012-90.html - https://bugzilla.mozilla.org/show_bug.cgi?id=802557 - http://www.ubuntu.com/usn/USN-1620-2 - http://lists.op
2-90.html - https://bugzilla.mozilla.org/show_bug.cgi?id=802557 - http://www.ubuntu.com/usn/USN-1620-2 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html - http://secunia.com/advisories/51165 - http://rhn.redhat.com/errata/RHSA-2012-1413.html - http://secunia.com/advisories/51146
CVE ID: CVE-2012-4197 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T20:28:07.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla/Attachment.pm in attachment.cgi in Bugzilla 2.x and 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 allows remote attackers to read attachment descriptions from private bugs via an obsolete=1 insert action. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=802204 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80032 - http:
andriva.com/security/advisories?name=MDVSA-2013:066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80032 - http://www.bugzilla.org/security/3.6.11/
CVE ID: CVE-2012-4198 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T20:28:07.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User.get method in Bugzilla/WebService/User.pm in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 has a different outcome for a groups request depending on whether a group exists, which allows remote authenticated users to discover private group names by observing whether a call throws an error. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=
ences: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=781850 - http://www.bugzilla.org/security/3.6.11/
CVE ID: CVE-2012-4199 State: PUBLISHED Published: 2012-11-16T11:00:00 Last Updated: 2024-08-06T20:28:07.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: template/en/default/bug/field-events.js.tmpl in Bugzilla 3.x before 3.6.12, 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 generates JavaScript function calls containing private product names or private component names in certain circumstances involving custom-field visibility control, which allows remote attackers to obtain sensitive information by reading HTML source code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulne
source code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80029 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - http://www.bugzilla.org/security/3.6.11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=731178
CVE ID: CVE-2012-4201 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T20:28:07.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which allows remote attackers to conduct cross-site scripting (XSS) attacks or read arbitrary files by leveraging a sandboxed add-on. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1638-3 - http:
ed add-on. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html - http://www.ubuntu.com/usn/USN-1636-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html - http://rhn.redhat.com/errata/RHSA-2012-1483.html - http://www.debian.org/security/2012/dsa-2584 - http://rhn.redhat.com/errata/RHSA-2012-1482.html - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com/advisories/51439 - http://secunia.com/advisories/514
use.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com/advisories/51439 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15995 - http://www.mozilla.org/security/announce/2012/mfsa2012-93.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html - http://secunia.com/advisories/51359 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:173 - http://www.securityfocus.com/bid/56618 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html - http://osvdb.org/87594 - http://secunia.com/advisories/51381 - http://www.debian.org/se
-updates/2012-11/msg00092.html - http://osvdb.org/87594 - http://secunia.com/advisories/51381 - http://www.debian.org/security/2012/dsa-2583 - http://secunia.com/advisories/51369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80171 - http://secunia.com/advisories/51360 - https://bugzilla.mozilla.org/show_bug.cgi?id=747607 - http://www.debian.org/security/2012/dsa-2588
CVE ID: CVE-2012-4202 State: PUBLISHED Published: 2012-11-21T11:00:00 Last Updated: 2024-08-06T20:28:07.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via a crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-92.html - http://www.ubuntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/
2/mfsa2012-92.html - http://www.ubuntu.com/usn/USN-1638-3 - http://secunia.com/advisories/51370 - http://www.ubuntu.com/usn/USN-1638-2 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html - http://www.ubuntu.com/usn/USN-1636-1 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html - http://rhn.redhat.com/errata/RHSA-2012-1483.html - https://bugzilla.mozilla.org/show_bug.cgi?id=758200 - http://rhn.redhat.com/errata/RHSA-2012-1482.html - http://secunia.com/advisories/51434 - http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html - http://secunia.com/advisories/51439 - http://secunia.com/advisories/51440 - http://www.ubuntu.com/usn/USN-1638-1 - http