|
VCID-3f6v-vzxk-wfdc
|
Mozilla developer Blake Kaplan reported that
__android_log_print is called insecurely in places. If a malicious web page used
a dump() statement with a specially crafted string, it can trigger a potentially
exploitable crash.
This vulnerability only affects Firefox for Android.
|
CVE-2012-3979
|
|
VCID-3kbe-n6t9-jkfm
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3969
|
|
VCID-3rpd-tmmh-y3hj
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3971
|
|
VCID-49g6-9fcz-uych
|
Security researchers Thai Duong and Juliano Rizzo reported that SPDY's request header compression leads to information leakage, which can allow the extraction of private data such as session cookies, even over an encrypted SSL connection.
|
CVE-2012-4930
|
|
VCID-5rsd-c1gz-bkfz
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3976
|
|
VCID-6rag-r46w-ybh2
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-1971
|
|
VCID-6rra-yhny-j3a3
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-1956
|
|
VCID-arvz-zhyp-quec
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3972
|
|
VCID-dzav-dzek-ybfy
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3975
|
|
VCID-fpme-6gng-7kaf
|
Security researcher Masato Kinugawa reported that if a
crafted executable is placed in the root partition on a Windows file system, the
Firefox and Thunderbird installer will launch this program after a standard
installation instead of Firefox or Thunderbird, running this program with the
user's privileges.
|
CVE-2012-3974
|
|
VCID-kyrd-z3u1-rkb8
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3968
|
|
VCID-mqhx-3cd4-cfgt
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-1972
|
|
VCID-pky8-7xz3-dbcu
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3965
|
|
VCID-ss9q-d337-5ub1
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3978
|
|
VCID-tw2h-8upr-zke6
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3966
|
|
VCID-wt7u-912x-gucf
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3980
|
|
VCID-ye1r-vbsf-6yhq
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2012-3973
|