Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.redhat.com/errata/RHSA-2012-1211.html - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.debian.org/security/2012/dsa-2553 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16494 - https://bugzilla.mozilla.org/show_bug.cgi?id=769120 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg0002
/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3963 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55340 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - https://bug
- http://www.securityfocus.com/bid/55340 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - https://bugzilla.mozilla.org/show_bug.cgi?id=762280 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16437
CVE ID: CVE-2012-3964 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16857 - http://rhn.redhat.com/e
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16857 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - https://bugzilla.mozilla.org/show_bug.cgi?id=756241 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.securityfocus.com/bid/55322 - http://www.xerox.com/download/se
suse-security-announce/2012-08/msg00028.html - http://www.securityfocus.com/bid/55322 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3965 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=769108 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16442 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubun
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16442 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://www.mozilla.org/security/announce/2012/mfsa2012-60.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
CVE ID: CVE-2012-3966 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component. Additional Analyst Notes: - CVE Program Container: R
oper processing of the alpha channel by the nsBMPDecoder component. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.mozilla.org/security/announce/2012/mfsa2012-61.html - https://bugzilla.mozilla.org/show_bug.cgi?id=775794 - https://bugzilla.mozilla.org/show_bug.cgi?id=775793 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16246 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-securit
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3967 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html -
ite. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://www.securityfocus.com/bid/55277 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - https://bugzilla.mozilla.org/show_bug.cgi?id=777028 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.mozilla.org/security/announce/2012/mfsa2012-62.html - http://www.xerox.com/download/security/security-bulletin/16
://www.mozilla.org/security/announce/2012/mfsa2012-62.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3968 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a fragment shader by its accessor. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=775852 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://oval.cisecurity.org/reposi
zilla.org/show_bug.cgi?id=775852 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16280 - http://www.securityfocus.com/bid/55276 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.mozilla.org/security/announce/2012/mfsa2012-62.html - http://www.xerox.com/download/security/security-bulle
- http://www.mozilla.org/security/announce/2012/mfsa2012-62.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3969 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2556 - http://www.securityfocus.com/bid/55292 - ht
gram Container: References: - http://www.debian.org/security/2012/dsa-2556 - http://www.securityfocus.com/bid/55292 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16635 - https://bugzilla.mozilla.org/show_bug.cgi?id=782141 - http://www.debian.org/security/2012/dsa-2553 - http://www.mozilla.org/security/announce/2012/mfsa2012-63.html - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.open
.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3970 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html
other. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55278 - http://www.mozilla.org/security/announce/2012/mfsa2012-63.html - http://www.ubuntu.com/usn/USN-1548-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16876 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=760996 - http://lists.opensuse.org/opensuse-secu
ce/2012-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=760996 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3971 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=753230 - http://www.mozilla.org/security/announce/2012/mfsa2012-64.html - https://bugzilla.mozill
la.org/show_bug.cgi?id=753230 - http://www.mozilla.org/security/announce/2012/mfsa2012-64.html - https://bugzilla.mozilla.org/show_bug.cgi?id=753623 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16062 - http://www.securityfocus.com/bid/55304 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
CVE ID: CVE-2012-3972 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2556 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.debian.org/security/2012
bian.org/security/2012/dsa-2556 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.debian.org/security/2012/dsa-2553 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16234 - http://www.mozilla.org/security/announce/2012/mfsa2012-65.html - http://www.ubuntu.com/usn/USN-1548-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=746855 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.or
ty/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3973 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17039 - https://bugzilla.mo
es: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17039 - https://bugzilla.mozilla.org/show_bug.cgi?id=757128 - http://www.mozilla.org/security/announce/2012/mfsa2012-66.html - http://www.securityfocus.com/bid/55308 - http://osvdb.org/85005 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
CVE ID: CVE-2012-3974 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55312 - http://www.mozilla.org/security/announce/2012/mfsa2012-67.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
rg/security/announce/2012/mfsa2012-67.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16692 - https://bugzilla.mozilla.org/show_bug.cgi?id=770478 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3975 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-68.html - http://www.securityfocus.com/bid/55311 - http://www.ubuntu.com/usn/USN-1548-1 - https://bugzilla.mozilla
a2012-68.html - http://www.securityfocus.com/bid/55311 - http://www.ubuntu.com/usn/USN-1548-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=770684 - http://www.ubuntu.com/usn/USN-1548-2 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16855 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
CVE ID: CVE-2012-3976 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-69.html - https://bugzilla.mozilla.org/show_bug.cgi?id=768568 - http://www.ubuntu.com/usn/USN-1548-1 - http://www
sa2012-69.html - https://bugzilla.mozilla.org/show_bug.cgi?id=768568 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.securityfocus.com/bid/55313 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16060
CVE ID: CVE-2012-3977 State: REJECTED Published: 2012-10-09T10:00:00 Last Updated: 2013-11-02T09:00:00 Description: No description available.
CVE ID: CVE-2012-3978 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=770429 - http:
tional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=770429 - http://www.debian.org/security/2012/dsa-2556 - http://www.mozilla.org/security/announce/2012/mfsa2012-70.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16923 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.debian.org/security/2012/dsa-2553 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://www.securityfocus.com/bid/55306 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/20
10.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-3979 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T20:21:04.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2012/mfsa2012-71.html - http://www.securityfocus.com/bid/55344 - https://bugzilla.mozilla.org/show_bug.cgi?id=769265 - http://lists.opensuse.org/opensuse-security-announce/2012-09/ms
- https://bugzilla.mozilla.org/show_bug.cgi?id=769265 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html