Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securityfocus.com/bid/54584 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - https://bugzilla.mozilla.org/show_bug.cgi?id=761655 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-51.html - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.op
012/mfsa2012-51.html - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://osvdb.org/84003 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16993
CVE ID: CVE-2012-1962 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://osvdb.org/84004 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.securityfocus.com/bid/54575 - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16729 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?102725
- http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://www.mozilla.org/security/announce/2012/mfsa2012-52.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - https://bugzilla.mozilla.org/show_bug.cgi?id=764296 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1963 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - htt
a violation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=767778 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html -
ttp://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17056 - http://osvdb.org/84005 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://www.securityfocus.com/bid/54582 - http://secunia.com/advisories/49993 - http://www.mozilla.org/security/announce/2012/mfsa2012-53.html - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1964 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.
tended exception via an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.securityfocus.com/bid/54581 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - https://bugzilla.mozilla.org/show_bug.cgi?id=633691 - http://www.ubuntu.com/usn/USN-1509-2 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://secunia.com/advisories/49965 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00
msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://www.ubuntu.com/usn/USN-1509-1 - http://www.mozilla.org/security/announce/2012/mfsa2012-54.html - http://secunia.com/advisories/49993 - http://osvdb.org/84011 - http://secunia.com/advisories/49972 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16783
CVE ID: CVE-2012-1965 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=758990 - http://secunia.com/advisories/49992 - http://www.securitytracker.com/id?1027256 - http://www.mozilla.org/security/announce/2012/mfsa2012-55.html - http:/
92 - http://www.securitytracker.com/id?1027256 - http://www.mozilla.org/security/announce/2012/mfsa2012-55.html - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17001 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://secunia.com/advisories/49965 - http://osvdb.org/84012 - http://www.securityfocus.com/bid/54579 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://www.ubuntu.com/usn/US
sg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1966 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49992 - http://www.debian.org/security/2012/dsa-2514 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2
ecuritytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://www.ubuntu.com/usn/USN-1509-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17037 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://osvdb.org/84009 - http://www.mozilla.org/security/announce/2012/mfsa2012-46.html - http://secunia.com/advisories/49965 - http://www.securityfocus.com/bid/54577 - https://bugzilla.mozilla.org/show_bug.cgi?id=734076 - http://secunia.com/advisories/49964 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://lists.opensuse.org/open
ries/49964 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1967 State: PUBLISHED Published: 2012-07-18T10:00:00 Last Updated: 2024-08-06T19:17:27.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49977 - http://secunia.com/advisories/49992 - http://www.mozilla.org/security/announce/2012/mfsa2012-56.ht
om/advisories/49977 - http://secunia.com/advisories/49992 - http://www.mozilla.org/security/announce/2012/mfsa2012-56.html - http://www.debian.org/security/2012/dsa-2514 - http://www.debian.org/security/2012/dsa-2528 - http://www.securitytracker.com/id?1027256 - http://rhn.redhat.com/errata/RHSA-2012-1088.html - http://secunia.com/advisories/49963 - http://osvdb.org/84013 - http://www.ubuntu.com/usn/USN-1509-2 - http://www.securitytracker.com/id?1027258 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025 - http://secunia.com/advisories/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-
ries/49979 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html - http://www.ubuntu.com/usn/USN-1510-1 - http://secunia.com/advisories/49965 - http://www.securitytracker.com/id?1027257 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html - http://www.securityfocus.com/bid/54573 - https://bugzilla.mozilla.org/show_bug.cgi?id=758344 - http://secunia.com/advisories/49964 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html - http://secunia.com/advisories/49994 - http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://sec
announce/2012-07/msg00013.html - http://secunia.com/advisories/49968 - http://www.ubuntu.com/usn/USN-1509-1 - http://secunia.com/advisories/49993 - http://secunia.com/advisories/49972
CVE ID: CVE-2012-1968 State: PUBLISHED Published: 2012-07-28T18:00:00Z Last Updated: 2024-09-16T23:11:52.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=777398 - http://www.bugzilla.org/security/3.6.9/ - http://secunia.com/advisories/50040
CVE ID: CVE-2012-1969 State: PUBLISHED Published: 2012-07-28T18:00:00 Last Updated: 2024-08-06T19:17:27.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_attachment_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before 4.2.2, and 4.3.x before 4.3.2 does not check whether an attachment is private before presenting the attachment description within a public comment, which allows remote attackers to obtain sensitive description information by reading a comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugzilla.org/security/3.6.9/ - http://www.mandriva.com/security/advisori
CVE Program Container: References: - http://www.bugzilla.org/security/3.6.9/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:066 - https://bugzilla.mozilla.org/show_bug.cgi?id=777586 - http://secunia.com/advisories/50040
CVE ID: CVE-2012-1970 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T19:17:27.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2556 - https://bugzilla.mozilla.org/show_bug.cgi?id=758408 - http:/
eferences: - http://www.debian.org/security/2012/dsa-2556 - https://bugzilla.mozilla.org/show_bug.cgi?id=758408 - http://www.mozilla.org/security/announce/2012/mfsa2012-57.html - https://bugzilla.mozilla.org/show_bug.cgi?id=745158 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.securityfocus.com/bid/55266 - https://bugzilla.mozilla.org/show_bug.cgi?id=778765 - http://www.debian.org/security/2012/dsa-2553 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16910 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announ
al%3Adef%3A16910 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - https://bugzilla.mozilla.org/show_bug.cgi?id=775206 - https://bugzilla.mozilla.org/show_bug.cgi?id=777806 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=764176 - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - https://bugzilla.mozilla.org/show_bug.cgi?id=761831 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-1971 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T19:17:27.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to garbage collection after certain MethodJIT execution, and unknown other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=730208 - http://www.mozilla.org/security/announ
am Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=730208 - http://www.mozilla.org/security/announce/2012/mfsa2012-57.html - https://bugzilla.mozilla.org/show_bug.cgi?id=754150 - https://bugzilla.mozilla.org/show_bug.cgi?id=780712 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16841 - https://bugzilla.mozilla.org/show_bug.cgi?id=749039 - https://bugzilla.mozilla.org/show_bug.cgi?id=754242 - https://bugzilla.mozilla.org/show_bug.cgi?id=755916 - https://bugzilla.mozilla.org/show_bug.cgi?id=765936 - https://bugzilla.mozilla.org/show_bug.cgi?id=719750 - https://bugzilla.mozilla.org/show_bug.cgi?id=779849 - http://www.ubuntu.com/usn/
la.mozilla.org/show_bug.cgi?id=719750 - https://bugzilla.mozilla.org/show_bug.cgi?id=779849 - http://www.ubuntu.com/usn/USN-1548-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=773097 - https://bugzilla.mozilla.org/show_bug.cgi?id=732870 - https://bugzilla.mozilla.org/show_bug.cgi?id=752087 - http://www.ubuntu.com/usn/USN-1548-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=753162 - https://bugzilla.mozilla.org/show_bug.cgi?id=748119 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - https://bugzilla.mozilla.org/show_bug.cgi?id=752038 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://www.xerox.com/download/security/security-bu
lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-1972 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T19:17:27.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2556 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http
er: References: - http://www.debian.org/security/2012/dsa-2556 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - https://bugzilla.mozilla.org/show_bug.cgi?id=778428 - http://www.securityfocus.com/bid/55314 - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.debian.org/security/2012/dsa-2553 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-ann
://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17017 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-1973 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T19:17:27.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=773207 - http://www.debian.org/security/2012/dsa-2556 - http:/
eferences: - https://bugzilla.mozilla.org/show_bug.cgi?id=773207 - http://www.debian.org/security/2012/dsa-2556 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.debian.org/security/2012/dsa-2553 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17045 - http://www.securityfocus.com/bid/55316 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse
urity-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-1974 State: PUBLISHED Published: 2012-08-29T10:00:00 Last Updated: 2024-08-06T19:17:27.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015 - http://www.debia
ences: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17015 - http://www.debian.org/security/2012/dsa-2556 - http://www.securityfocus.com/bid/55317 - http://rhn.redhat.com/errata/RHSA-2012-1211.html - http://www.mozilla.org/security/announce/2012/mfsa2012-58.html - http://www.debian.org/security/2012/dsa-2553 - https://bugzilla.mozilla.org/show_bug.cgi?id=769303 - http://www.ubuntu.com/usn/USN-1548-1 - http://www.ubuntu.com/usn/USN-1548-2 - http://rhn.redhat.com/errata/RHSA-2012-1210.html - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-sec
y-announce/2012-09/msg00014.html - http://www.debian.org/security/2012/dsa-2554 - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf