Henrik Skupin、Jesse Ruderman、Christian Holler、Soroush Dalili 等人在 Thunderbird 中發現數個記憶體損毀瑕疵。如果使用者遭到誘騙而開啟惡意網站並啟用 JavaScript，攻擊者可惡意利用這些弱點，在使用者叫用這些程式時，執行其他網站內容內的任意 JavaScript 程式碼或任意程式碼。(CVE-2012-3982、CVE-2012-3983、CVE-2012-3988、CVE-2012-3989、CVE-2012-4191)

David Bloom 和 Jordi Chancel 發現，Thunderbird 不一定會正確處理 <select> 元素。若使用者遭誘騙而開啟惡意網站並啟用 JavaScript，遠端攻擊者即可惡意利用此弱點，發動 URL 偽造和點擊劫持攻擊。(CVE-2012-3984)

Collin Jackson 發現，Thunderbird 並未正確遵循 document.domain 行為的 HTML5 規格。若使用者遭誘騙而開啟惡意網站並啟用 JavaScript，遠端攻擊者即可惡意利用此弱點，透過執行 JavaScript 發動跨網站指令碼 (XSS) 攻擊。(CVE-2012-3985)

Johnny Stenback 發現，Thunderbird 並未對 DOMWindowUtils 的測試方法正確執行安全性檢查。(CVE-2012-3986)

Alice White 發現，使用 JSAPI 時，可繞過 GetProperty 的安全性檢查。若使用者遭誘騙而開啟惡意網頁並啟用 JavaScript，遠端攻擊者即可惡意利用此弱點，以叫用程式的使用者身分執行任意程式碼。(CVE-2012-3991)

Mariusz Mlynski 在 Thunderbird 中發現一個歷程記錄狀態錯誤。若使用者遭誘騙而開啟惡意網站並啟用 JavaScript，遠端攻擊者即可惡意利用此弱點，偽造位置內容，從而插入指令碼，或是攔截發佈的資料。(CVE-2012-3992)

Mariusz Mlynski 及其他人發現 Thunderbird 中有數個瑕疵，其允許遠端攻擊者發動跨網站指令碼 (XSS) 攻擊。在有跨網站指令碼弱點的情況下，如果使用者遭誘騙而檢視特製的網頁且啟用了 JavaScript，遠端攻擊者可惡意利用這些弱點，修改相同網域中的內容或是竊取機密資料。(CVE-2012-3993、CVE-2012-3994、CVE-2012-4184)

Abhishek Arya、Atte Kettunen 等人使用位址偵察工具時，在 Thunderbird 中發現數個記憶體瑕疵。如果使用者遭誘騙而開啟惡意網站並啟用 JavaScript，攻擊者即可惡意利用這些瑕疵，在使用者叫用這些程式時，執行其他網站內容內的任意 JavaScript 程式碼或執行任意程式碼。(CVE-2012-3990、CVE-2012-3995、CVE-2012-4179、CVE-2012-4180、CVE-2012-4181、CVE-2012-4182、CVE-2012-4183、CVE-2012-4185、CVE-2012-4186、CVE-2012-4187、CVE-2012-4188)

據發現，Thunderbird 允許不當存取位置物件。攻擊者可惡意利用此弱點取得敏感資訊。在某些情況下，遠端攻擊者可能利用此弱點，在使用者叫用程式時執行任意程式碼。(CVE-2012-4192、CVE-2012-4193)。

安裝的 Firefox 版本比 16.0 舊，因此會受到以下弱點影響：

- 在 Mozilla 型產品使用的瀏覽器引擎中存在數個記憶體安全問題，可遭到惡意利用而執行任意程式碼。(CVE-2012-3983)

- 「<select>」元素可能遭到濫用，進而覆蓋新載入頁面的任意位置，而且也可能遭到點擊劫持攻擊利用。(CVE-2012-3984、CVE-2012-5354)

- 在 HTML 規格中的違規 (針對「document.domain」行為) 會遭到濫用，可能導致跨網站指令碼攻擊。(CVE-2012-3985)

- 用於測試之功能的某些方法 (DOMWindowUtils) 並未受到適當保護，可藉由網頁透過指令碼進行呼叫。(CVE-2012-3986)

- 叫用全螢幕模式並加上向後導覽歷程記錄，會導致可能遭惡意利用的拒絕服務。(CVE-2012-3988)

- 當在特定類型的 JavaScript 物件上使用「instanceof」運算子來進行無效轉換時，可能會遭到惡意利用並導致當機。(CVE-2012-3989)

- 當透過 JSAP 叫用「GetProperty」函式時，如果取得跨來源內容，則可繞過安全性檢查，進而可能允許任意程式碼執行。(CVE-2012-3991)

- 透過「top.location」藉由二進位外掛程式，可以存取「location」內容，而且也可以藉由「Object.defineProperty」遮蔽「top」，進而可能允許透過外掛程式執行跨網站指令碼攻擊。(CVE-2012-3994)

- Chrome Object Wrapper (COW) 存在多個瑕疵，可允許存取有權限的功能，進而導致跨網站指令碼攻擊或任意程式碼執行。(CVE-2012-3993、CVE-2012-4184)

-「location.hash」內容易於遭受攻擊，可允許攻擊者插入指令碼或攔截發佈資料。(CVE-2012-3992)

-「位址偵察工具」受到多個可能遭惡意利用的釋放後使用瑕疵影響。(CVE-2012-3990、CVE-2012-3995、CVE-2012-4179、CVE-2012-4180、CVE-2012-4181、CVE-2012-4182、CVE-2012-4183)

-「位址偵察工具」受到多個可能遭惡意利用的堆積記憶體損毀問題影響。(CVE-2012-4185、CVE-2012-4186、CVE-2012-4187、CVE-2012-4188)

Versions of Firefox prior to 16.0 are potentially affected by the following security issues :

 - Multiple memory-corruption vulnerabilities in the browser engine that could lead to arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)
 - A URI-spoofing vulnerability due to an error when handling the '<select>' dropdown menu. This issue can be exploited to display arbitrary content while showing the URL of another site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984, CVE-2012-5354)
 - A security-bypass vulnerability exists because it fails to properly enforce the same-origin policy. Specifically, the error occurs when handling 'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks. (CVE-2012-3985)
 - Multiple security bypass vulnerabilities exists in the 'nsDOMWindowUtils' methods. (CVE-2012-3986)
 - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when transitioning into Reader Mode. Note: This issue affects only Firefox for Android. CVE-2012-3987)
 - A use-after-free issue occurs when invoking full screen mode and navigating backwards in history. (CVE-2012-3988)
 - A denial-of-service vulnerability that occurs due to invalid cast error. Specifically, this issue occurs when using the instanceof operator on certain JavaScript objects. (CVE-2012-3989)
 - A security-bypass vulnerability exists because it fails to properly enforce the cross-origin policy. Specifically, this issue occurs when invoking the 'GetProperty()' function through JSAPI. An attacker can exploit this issue to perform arbitrary code-execution. (CVE-2012-3991)
 - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when handling the 'location' property through binary plugins. (CVE-2012-3994)
 - A security-bypass vulnerability exists because of an error in the Chrome Object Wrapper (COW) when handling the 'InstallTrigger' object. An attacker can exploit this issue to access certain privileged functions and properties. (CVE-2012-4184, CVE-2012-3993)
 - An arbitrary code-execution occurs when handling the 'location.hash' property and history navigation. (CVE-2012-3992)
 - An out-of-bounds read error affects the 'IsCSSWordSpacingSpace()' function. (CVE-2012-3995)
 - A use-after-free error affects the 'nsHTMLCSSUtils::CreateCSSPropertyTxn()' function. (CVE-2012-4179)
 - A heap-based buffer-overflow vulnerability exists in the 'nsHTMLEditor::IsPrevCharInNodeWhitespace()' function. (CVE-2012-4180)
 - A use-after-free error affects the 'nsSMILAnimationController::DoSample()' function. (CVE-2012-4181)
 - A use-after-free error affects the 'nsTextEditRules::WillInsert()' function. (CVE-2012-4182)
 - A use-after-free error affects the 'DOMSVGTests::GetRequiredFeatures()' function. (CVE-2012-4183)
 - A buffer-overflow vulnerability exists in the 'nsCharTraits::length()' function. (CVE-2012-4185)
 - A heap-based buffer-overflow vulnerability exists in the 'nsWaveReader::DecodeAudioData()" function. (CVE-2012-4186)
 - A memory-corruption vulnerability exists in the 'insPos' property. (CVE-2012-4187)
 - A heap-based buffer-overflow exists in the 'Convolve3x3()' function. (CVE-2012-4188)
 - A use-after-free error affects the 'nsIContent::GetNameSpaceID()' function. (CVE-2012-3990)

 - A cross domain information disclosure exists due to improper access to the 'location' object. (CVE-2012-4192)
 - A security-bypass vulnerability exists due to an error in security wrappers does not unwrap the 'defaultValue()' function properly. An attacker can exploit this issue to gain access to the 'location' object. (CVE-2012-4193)
These vulnerabilities allow attackers to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, execute arbitrary code in the context of the vulnerable application, crash affected applications, obtain potentially sensitive information, gain escalated privileges, bypass security restrictions, and perform unauthorized actions; other attacks may also be possible.

Versions of SeaMonkey 2.x prior to 2.13 are potentially affected by the following security issues :

 - Multiple memory-corruption vulnerabilities in the browser engine exist which could lead to arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)
 - A URI-spoofing vulnerability exists due to an error when handling the '<select>' dropdown menu. This issue can be exploited to display arbitrary content while showing the URL of another site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984)
 - A security-bypass vulnerability exists because it fails to properly enforce the same-origin policy. Specifically, the error occurs when handling 'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks. (CVE-2012-3985)
 - Multiple security bypass vulnerabilities exist in the 'nsDOMWindowUtils' methods. (CVE-2012-3986)
 - A use-after-free issue occurs when invoking full screen mode and navigating backwards in history. (CVE-2012-3988)
 - A denial-of-service vulnerability exists due to an invalid cast error. Specifically, this issue occurs when using the instanceof operator on certain JavaScript objects. (CVE-2012-3989)
 - A security-bypass vulnerability exists because it fails to properly enforce the cross-origin policy. Specifically, this issue occurs when invoking the 'GetProperty()' function through JSAPI. An attacker can exploit this issue to perform arbitrary code-execution. (CVE-2012-3991)
 - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when handling the 'location' property through binary plugins. (CVE-2012-3994)
 - A security-bypass vulnerability exists because of an error in the Chrome Object Wrapper (COW) when handling the 'InstallTrigger' object. An attacker can exploit this issue to access certain privileged functions and properties. (CVE-2012-4184, CVE-2012-3993)
 - An arbitrary code-execution occurs when handling the 'location.hash' property and history navigation. (CVE-2012-3992)
 - An out-of-bounds read error affects the 'IsCSSWordSpacingSpace()' function. (CVE-2012-3995)
 - A use-after-free error affects the 'nsHTMLCSSUtils::CreateCSSPropertyTxn()' function. (CVE-2012-4179)
 - A heap-based buffer-overflow vulnerability exists in the 'nsHTMLEditor::IsPrevCharInNodeWhitespace()' function. (CVE-2012-4180)
 - A use-after-free error affects the 'nsSMILAnimationController::DoSample()' function. (CVE-2012-4181)
 - A use-after-free error affects the 'nsTextEditRules::WillInsert()' function. (CVE-2012-4182)
 - A use-after-free error affects the 'DOMSVGTests::GetRequiredFeatures()' function. (CVE-2012-4183)
 - A buffer-overflow vulnerability exists in the 'nsCharTraits::length()' function. (CVE-2012-4185)
 - A heap-based buffer-overflow vulnerability exists in the 'nsWaveReader::DecodeAudioData()" function. (CVE-2012-4186)
 - A memory-corruption vulnerability exists in the 'insPos' property. (CVE-2012-4187)
 - A heap-based buffer-overflow exists in the 'Convolve3x3()' function. (CVE-2012-4188)
 - A use-after-free error affects the 'nsIContent::GetNameSpaceID()' function. (CVE-2012-3990)
 - A cross domain information disclosure exists due to improper access to the 'location' object. (CVE-2012-4192)
 - A security-bypass vulnerability exists due to an error in security wrappers that does not unwrap the 'defaultValue()' function properly. An attacker can exploit this issue to gain access to the 'location' object. (CVE-2012-4193)

These vulnerabilities allow attackers to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, execute arbitrary code in the context of the vulnerable application, crash affected applications, obtain potentially sensitive information, gain escalated privileges, bypass security restrictions, and perform unauthorized actions; other attacks may also be possible.

Versions of Firefox prior to 16.0.1 are affected by the following security issues :

 - Multiple memory-corruption vulnerabilities in the browser engine that could lead to arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)
 - A URI-spoofing vulnerability due to an error when handling the '<select>' dropdown menu. This issue can be exploited to display arbitrary content while showing the URL of another site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984, CVE-2012-5354)
 - A security-bypass vulnerability exists because it fails to properly enforce the same-origin policy. Specifically, the error occurs when handling 'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks. (CVE-2012-3985)
 - Multiple security bypass vulnerabilities exists in the 'nsDOMWindowUtils' methods. (CVE-2012-3986)
 - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when transitioning into Reader Mode. Note: This issue affects only Firefox for Android. CVE-2012-3987)
 - A use-after-free issue occurs when invoking full screen mode and navigating backwards in history. (CVE-2012-3988)
 - A denial-of-service vulnerability that occurs due to invalid cast error. Specifically, this issue occurs when using the instanceof operator on certain JavaScript objects. (CVE-2012-3989)
 - A security-bypass vulnerability exists because it fails to properly enforce the cross-origin policy. Specifically, this issue occurs when invoking the 'GetProperty()' function through JSAPI. An attacker can exploit this issue to perform arbitrary code-execution. (CVE-2012-3991)
 - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when handling the 'location' property through binary plugins. (CVE-2012-3994)
 - A security-bypass vulnerability exists because of an error in the Chrome Object Wrapper (COW) when handling the 'InstallTrigger' object. An attacker can exploit this issue to access certain privileged functions and properties. (CVE-2012-4184, CVE-2012-3993)
 - An arbitrary code-execution occurs when handling the 'location.hash' property and history navigation. (CVE-2012-3992)
 - An out-of-bounds read error affects the 'IsCSSWordSpacingSpace()' function. (CVE-2012-3995)
 - A use-after-free error affects the 'nsHTMLCSSUtils::CreateCSSPropertyTxn()' function. (CVE-2012-4179)
 - A heap-based buffer-overflow vulnerability exists in the 'nsHTMLEditor::IsPrevCharInNodeWhitespace()' function. (CVE-2012-4180)
 - A use-after-free error affects the 'nsSMILAnimationController::DoSample()' function. (CVE-2012-4181)
 - A use-after-free error affects the 'nsTextEditRules::WillInsert()' function. (CVE-2012-4182)
 - A use-after-free error affects the 'DOMSVGTests::GetRequiredFeatures()' function. (CVE-2012-4183)
 - A buffer-overflow vulnerability exists in the 'nsCharTraits::length()' function. (CVE-2012-4185)
 - A heap-based buffer-overflow vulnerability exists in the 'nsWaveReader::DecodeAudioData()' function. (CVE-2012-4186)
 - A memory-corruption vulnerability exists in the 'insPos' property. (CVE-2012-4187)
 - A heap-based buffer-overflow exists in the 'Convolve3x3()' function. (CVE-2012-4188)
 - A use-after-free error affects the 'nsIContent::GetNameSpaceID()' function. (CVE-2012-3990)
 - A cross domain information disclosure exists due to improper access to the 'location' object. (CVE-2012-4192)
 - A security-bypass vulnerability exists due to an error in security wrappers does not unwrap the 'defaultValue()' function properly. An attacker can exploit this issue to gain access to the 'location' object. (CVE-2012-4193)
 These vulnerabilities allow attackers to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, execute arbitrary code in the context of the vulnerable application, crash affected applications, obtain potentially sensitive information, gain escalated privileges, bypass security restrictions, and perform unauthorized actions; other attacks may also be possible.

Versions of Firefox 16.x are potentially affected by the following security issues :

  - Multiple memory-corruption vulnerabilities in the browser engine that could lead to arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)

  - A URI-spoofing vulnerability due to an error when handling the '&lt;select&gt;' dropdown menu. This issue can be exploited to display arbitrary content while showing the URL of another site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984)

  - A security-bypass vulnerability exists because it fails to properly enforce the same-origin policy. Specifically, the error occurs when handling 'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks. (CVE-2012-3985)

  - Multiple security bypass vulnerabilities exists in the 'nsDOMWindowUtils' methods. (CVE-2012-3986)

  - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when transitioning into Reader Mode. Note: This issue affects only Firefox for Android. CVE-2012-3987)

  - A use-after-free issue occurs when invoking full screen mode and navigating backwards in history. (CVE-2012-3988)

  - A denial-of-service vulnerability that occurs due to invalid cast error. Specifically, this issue occurs when using the instanceof operator on certain JavaScript objects. (CVE-2012-3989)

  - A security-bypass vulnerability exists because it fails to properly enforce the cross-origin policy. Specifically, this issue occurs when invoking the 'GetProperty()' function through JSAPI. An attacker can exploit this issue to perform arbitrary code-execution. (CVE-2012-3991)

  - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when handling the 'location' property through binary plugins. (CVE-2012-3994)

  - A security-bypass vulnerability exists because of an error in the Chrome Object Wrapper (COW) when handling the 'InstallTrigger' object. An attacker can exploit this issue to access certain privileged functions and properties. (CVE-2012-4184, CVE-2012-3993)

  - An arbitrary code-execution occurs when handling the 'location.hash' property and history navigation. (CVE-2012-3992)

  - An out-of-bounds read error affects the 'IsCSSWordSpacingSpace()' function. (CVE-2012-3995)

  - A use-after-free error affects the 'nsHTMLCSSUtils::CreateCSSPropertyTxn()' function. (CVE-2012-4179)

  - A heap-based buffer-overflow vulnerability exists in the 'nsHTMLEditor::IsPrevCharInNodeWhitespace()' function. (CVE-2012-4180)

  - A use-after-free error affects the 'nsSMILAnimationController::DoSample()' function. (CVE-2012-4181)

  - A use-after-free error affects the 'nsTextEditRules::WillInsert()' function. (CVE-2012-4182)

  - A use-after-free error affects the 'DOMSVGTests::GetRequiredFeatures()' function. (CVE-2012-4183)

  - A buffer-overflow vulnerability exists in the 'nsCharTraits::length()' function. (CVE-2012-4185)

  - A heap-based buffer-overflow vulnerability exists in the 'nsWaveReader::DecodeAudioData()" function. (CVE-2012-4186)

  - A memory-corruption vulnerability exists in the 'insPos' property. (CVE-2012-4187)

  - A heap-based buffer-overflow exists in the 'Convolve3x3()' function. (CVE-2012-4188)

  - A use-after-free error affects the 'nsIContent::GetNameSpaceID()' function. (CVE-2012-3990)

  - A cross domain information disclosure exists due to improper access to the 'location' object. (CVE-2012-4192)

  - A security-bypass vulnerability exists due to an error in security wrappers does not unwrap the 'defaultValue()' function properly. An attacker can exploit this issue to gain access to the 'location' object. (CVE-2012-4193)
These vulnerabilities allow attackers to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, execute arbitrary code in the context of the vulnerable application, crash affected applications, obtain potentially sensitive information, gain escalated privileges, bypass security restrictions, and perform unauthorized actions; other attacks may also be possible.

Versions of Firefox 16.x are potentially affected by the following security issues :

  - Multiple memory-corruption vulnerabilities in the browser engine that could lead to arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)

  - A URI-spoofing vulnerability due to an error when handling the '&lt;select&gt;' dropdown menu. This issue can be exploited to display arbitrary content while showing the URL of another site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984, CVE-2012-5354)

  - A security-bypass vulnerability exists because it fails to properly enforce the same-origin policy. Specifically, the error occurs when handling 'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks. (CVE-2012-3985)

  - Multiple security bypass vulnerabilities exists in the 'nsDOMWindowUtils' methods. (CVE-2012-3986)

  - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when transitioning into Reader Mode. Note: This issue affects only Firefox for Android. CVE-2012-3987)

  - A use-after-free issue occurs when invoking full screen mode and navigating backwards in history. (CVE-2012-3988)

  - A denial-of-service vulnerability that occurs due to invalid cast error. Specifically, this issue occurs when using the instanceof operator on certain JavaScript objects. (CVE-2012-3989)

  - A security-bypass vulnerability exists because it fails to properly enforce the cross-origin policy. Specifically, this issue occurs when invoking the 'GetProperty()' function through JSAPI. An attacker can exploit this issue to perform arbitrary code-execution. (CVE-2012-3991)

  - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when handling the 'location' property through binary plugins. (CVE-2012-3994)

  - A security-bypass vulnerability exists because of an error in the Chrome Object Wrapper (COW) when handling the 'InstallTrigger' object. An attacker can exploit this issue to access certain privileged functions and properties. (CVE-2012-4184, CVE-2012-3993)

  - An arbitrary code-execution occurs when handling the 'location.hash' property and history navigation. (CVE-2012-3992)

  - An out-of-bounds read error affects the 'IsCSSWordSpacingSpace()' function. (CVE-2012-3995)

  - A use-after-free error affects the 'nsHTMLCSSUtils::CreateCSSPropertyTxn()' function. (CVE-2012-4179)

  - A heap-based buffer-overflow vulnerability exists in the 'nsHTMLEditor::IsPrevCharInNodeWhitespace()' function. (CVE-2012-4180)

  - A use-after-free error affects the 'nsSMILAnimationController::DoSample()' function. (CVE-2012-4181)

  - A use-after-free error affects the 'nsTextEditRules::WillInsert()' function. (CVE-2012-4182)

  - A use-after-free error affects the 'DOMSVGTests::GetRequiredFeatures()' function. (CVE-2012-4183)

  - A buffer-overflow vulnerability exists in the 'nsCharTraits::length()' function. (CVE-2012-4185)

  - A heap-based buffer-overflow vulnerability exists in the 'nsWaveReader::DecodeAudioData()" function. (CVE-2012-4186)

  - A memory-corruption vulnerability exists in the 'insPos' property. (CVE-2012-4187)

  - A heap-based buffer-overflow exists in the 'Convolve3x3()' function. (CVE-2012-4188)

  - A use-after-free error affects the 'nsIContent::GetNameSpaceID()' function. (CVE-2012-3990)

 - A cross domain information disclosure exists due to improper access to the 'location' object. (CVE-2012-4192)

  - A security-bypass vulnerability exists due to an error in security wrappers does not unwrap the 'defaultValue()' function properly. An attacker can exploit this issue to gain access to the 'location' object. (CVE-2012-4193)
 These vulnerabilities allow attackers to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, execute arbitrary code in the context of the vulnerable application, crash affected applications, obtain potentially sensitive information, gain escalated privileges, bypass security restrictions, and perform unauthorized actions; other attacks may also be possible.

Versions of Firefox 15.x are potentially affected by the following security issues :

  - Multiple memory-corruption vulnerabilities in the browser engine that could lead to arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)

  - A URI-spoofing vulnerability due to an error when handling the '&lt;select&gt;' dropdown menu. This issue can be exploited to display arbitrary content while showing the URL of another site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984, CVE-2012-5354)

  - A security-bypass vulnerability exists because it fails to properly enforce the same-origin policy. Specifically, the error occurs when handling 'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks. (CVE-2012-3985)

  - Multiple security bypass vulnerabilities exists in the 'nsDOMWindowUtils' methods. (CVE-2012-3986)

  - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when transitioning into Reader Mode. Note: This issue affects only Firefox for Android. CVE-2012-3987)

  - A use-after-free issue occurs when invoking full screen mode and navigating backwards in history. (CVE-2012-3988)

  - A denial-of-service vulnerability that occurs due to invalid cast error. Specifically, this issue occurs when using the instanceof operator on certain JavaScript objects. (CVE-2012-3989)

  - A security-bypass vulnerability exists because it fails to properly enforce the cross-origin policy. Specifically, this issue occurs when invoking the 'GetProperty()' function through JSAPI. An attacker can exploit this issue to perform arbitrary code-execution. (CVE-2012-3991)

  - A cross-site scripting vulnerability exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue occurs when handling the 'location' property through binary plugins. (CVE-2012-3994)

  - A security-bypass vulnerability exists because of an error in the Chrome Object Wrapper (COW) when handling the 'InstallTrigger' object. An attacker can exploit this issue to access certain privileged functions and properties. (CVE-2012-4184, CVE-2012-3993)

  - An arbitrary code-execution occurs when handling the 'location.hash' property and history navigation. (CVE-2012-3992)

  - An out-of-bounds read error affects the 'IsCSSWordSpacingSpace()' function. (CVE-2012-3995)

  - A use-after-free error affects the 'nsHTMLCSSUtils::CreateCSSPropertyTxn()' function. (CVE-2012-4179)

  - A heap-based buffer-overflow vulnerability exists in the 'nsHTMLEditor::IsPrevCharInNodeWhitespace()' function. (CVE-2012-4180)

  - A use-after-free error affects the 'nsSMILAnimationController::DoSample()' function. (CVE-2012-4181)

  - A use-after-free error affects the 'nsTextEditRules::WillInsert()' function. (CVE-2012-4182)

  - A use-after-free error affects the 'DOMSVGTests::GetRequiredFeatures()' function. (CVE-2012-4183)

  - A buffer-overflow vulnerability exists in the 'nsCharTraits::length()' function. (CVE-2012-4185)

  - A heap-based buffer-overflow vulnerability exists in the 'nsWaveReader::DecodeAudioData()" function. (CVE-2012-4186)

  - A memory-corruption vulnerability exists in the 'insPos' property. (CVE-2012-4187)

  - A heap-based buffer-overflow exists in the 'Convolve3x3()' function. (CVE-2012-4188)

  - A use-after-free error affects the 'nsIContent::GetNameSpaceID()' function. (CVE-2012-3990)

 - A cross domain information disclosure exists due to improper access to the 'location' object. (CVE-2012-4192)

  - A security-bypass vulnerability exists due to an error in security wrappers does not unwrap the 'defaultValue()' function properly. An attacker can exploit this issue to gain access to the 'location' object. (CVE-2012-4193)
These vulnerabilities allow attackers to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, execute arbitrary code in the context of the vulnerable application, crash affected applications, obtain potentially sensitive information, gain escalated privileges, bypass security restrictions, and perform unauthorized actions; other attacks may also be possible.

ID	名稱	產品	系列	已發布	已更新	嚴重性
62548	Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS：thunderbird 弱點 (USN-1611-1)	Nessus	Ubuntu Local Security Checks	2012/10/15	2019/9/19	critical
62576	Firefox < 16.0 多個弱點 (Mac OS X)	Nessus	MacOS X Local Security Checks	2012/10/17	2019/12/4	critical
6602	Mozilla Firefox < 16.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2012/10/16	2019/3/6	high
6603	SeaMonkey 2.x < 2.13 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2012/10/16	2019/3/6	high
6604	Mozilla Thunderbird < 16.0.1 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2012/10/16	2019/3/6	high
801301	Mozilla SeaMonkey 2.x < 2.13 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/10/16		high
801323	Mozilla Thunderbird 15.x <= 15 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	2012/10/16		high
801325	Mozilla Firefox 15.x <= 15 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/10/16		high

偵測

搜尋 Plugin

critical

critical

high

high

high

high

high

high