Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
757431 - http://secunia.com/advisories/49992 - https://bugzilla.mozilla.org/show_bug.cgi?id=766304 - https://bugzilla.mozilla.org/show_bug.cgi?id=752662 - http://www.securitytracker.com/id?1027256 - https://bugzilla.mozilla.org/show_bug.cgi?id=718290 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17027 - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - https://bugzilla.mozilla.org/show_bug.cgi?id=765179 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://osvdb.org/84006 - https://bugzilla.mozilla.org/show_bug.cgi?id=754725 - https://bugzilla.moz
com/usn/USN-1510-1 - http://osvdb.org/84006 - https://bugzilla.mozilla.org/show_bug.cgi?id=754725 - https://bugzilla.mozilla.org/show_bug.cgi?id=766018 - https://bugzilla.mozilla.org/show_bug.cgi?id=717488 - http://www.mozilla.org/security/announce/2012/mfsa2012-42.html - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - https://bugzilla.mozilla.org/show_bug.cgi?id=712914 - https://bugzilla.mozilla.org/show_bug.cgi?id=743876 - https://bugzilla.mozilla.org/show_bug.cgi?id=725499 - http://www.securityfocus.com/bid/54580 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg0
org/opensuse-security-announce/2012-07/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=738841 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1950 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49992 - http://www.mozilla.org/security/announce/2012/mfsa2012-43.html - http://www.debian.org/security/2012/dsa-2514 - http://www.debian.org/security/2012/dsa-2528 - https://bugzilla.mozilla.org/show_bug.cgi?id=724599 - http://www.securitytracker.com/id?102
org/security/2012/dsa-2528 - https://bugzilla.mozilla.org/show_bug.cgi?id=724599 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2 - http://secunia.com/advisories/49979 - https://bugzilla.mozilla.org/show_bug.cgi?id=725611 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16970 - http://secunia.com/advisories/49965 - https://bugzilla.mozilla.org/show_bug.cgi?id=724247 - http://osvdb.org/84008 - http://secunia.com/advisories/49964 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg
osvdb.org/84008 - http://secunia.com/advisories/49964 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1951 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisor
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securityfocus.com/bid/54578 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.mozilla.org/security/announce/2012/mfsa2012-44.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-anno
unia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - https://bugzilla.mozilla.org/show_bug.cgi?id=752902 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16077 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://osvdb.org/83997 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1952 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisorie
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securityfocus.com/bid/54578 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.mozilla.org/security/announce/2012/mfsa2012-44.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - https://bugzilla.mozilla.org/show_bug.cgi?id=759249 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?102725
- http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://osvdb.org/83999 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16942 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1953 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advi
onal Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16894 - http://www.securityfocus.com/bid/54578 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.mozilla.org/security/announce/2012/mfsa2012-44.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49
ensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://osvdb.org/83998 - https://bugzilla.mozilla.org/show_bug.cgi?id=765218 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1954 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisor
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securityfocus.com/bid/54578 - http://www.debian.org/security/2012/dsa-2514 - http://www.debian.org/security/2012/dsa-2528 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://secunia.com/advisories/49963 - http://www.mozilla.org/security/announce/2012/mfsa2012-44.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1
979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16984 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://osvdb.org/83995 - https://bugzilla.mozilla.org/show_bug.cgi?id=765139 - http://secunia.com/advisories/49964 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.
unia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1955 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.mozilla.org/security/announce/2012/mfsa2012-45.html - https://bugzilla.mozilla.org/show_bug.cgi?id=757376 - http
p://www.mozilla.org/security/announce/2012/mfsa2012-45.html - https://bugzilla.mozilla.org/show_bug.cgi?id=757376 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17004 - http://osvdb.org/83996 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announ
ia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972 - http://www.securityfocus.com/bid/54586
CVE ID: CVE-2012-1956 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T19:17:27.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - https://bugz
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16367 - http://rhn.redhat.com/errata/RHSA-2012-1351.html - https://bugzilla.mozilla.org/show_bug.cgi?id=756719 - http://www.securityfocus.com/bid/55260 - http://www.mozilla.org/security/announce/2012/mfsa2012-59.html - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
CVE ID: CVE-2012-1957 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://osvdb.org/84000 -
iner: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://osvdb.org/84000 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16844 - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.
965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://www.securityfocus.com/bid/54583 - http://www.mozilla.org/security/announce/2012/mfsa2012-47.html - https://bugzilla.mozilla.org/show_bug.cgi?id=750096 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1958 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.c
advisories/49977 - http://secunia.com/advisories/49992 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - https://bugzilla.mozilla.org/show_bug.cgi?id=750820 - http://www.securityfocus.com/bid/54574 - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-48.html - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://osvdb.org/84001 - http://lists.opensuse.org/opensuse-security-
9965 - http://www.securitytracker.com/id?1027257 - http://osvdb.org/84001 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16434 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1959 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - https://bugzill
ram Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - https://bugzilla.mozilla.org/show_bug.cgi?id=754044 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://osvdb.org/84002 - http://www.ubuntu.com/usn/USN-1509-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=737559 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-49.html - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
.mozilla.org/security/announce/2012/mfsa2012-49.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16920 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://www.securityfocus.com/bid/54576 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1960 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027256 - https://bugzilla.mozilla.org/show_bug.cgi?id=761014 - http://www.ubuntu.com/usn/USN-1509-2 - http
acker.com/id?1027256 - https://bugzilla.mozilla.org/show_bug.cgi?id=761014 - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16735 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/20
ce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://osvdb.org/84010 - http://secunia.com/advisories/49993 - http://www.securityfocus.com/bid/54572 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - http://secunia.com/advisories/49972 - http://www.mozilla.org/security/announce/2012/mfsa2012-50.html
CVE ID: CVE-2012-1961 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://ww