FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mozilla -- multiple vulnerabilities

Affected packages
11.0,1	<	firefox	<	13.0,1
		firefox	<	10.0.5,1
		linux-firefox	<	10.0.5,1
		linux-seamonkey	<	2.10
		linux-thunderbird	<	10.0.5
		seamonkey	<	2.10
11.0	<	thunderbird	<	13.0
		thunderbird	<	10.0.5
1.9.2.*	<	libxul	<	10.0.5

Details

VuXML ID	bfecf7c1-af47-11e1-9580-4061862b8c22
Discovery	2012-06-05
Entry	2012-06-05

The Mozilla Project reports:

MFSA 2012-34 Miscellaneous memory safety hazards (rv:13.0/ rv:10.0.5)

MFSA 2012-36 Content Security Policy inline-script bypass

MFSA 2012-37 Information disclosure though Windows file shares and shortcut files

MFSA 2012-38 Use-after-free while replacing/inserting a node in a document

MFSA 2012-39 NSS parsing errors with zero length items

MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer

[source]

References

CVE Name	CVE-2011-3101
CVE Name	CVE-2012-0441
CVE Name	CVE-2012-1937
CVE Name	CVE-2012-1938
CVE Name	CVE-2012-1939
CVE Name	CVE-2012-1940
CVE Name	CVE-2012-1941
CVE Name	CVE-2012-1944
CVE Name	CVE-2012-1945
CVE Name	CVE-2012-1946
CVE Name	CVE-2012-1947
URL	http://www.mozilla.org/security/announce/2012/mfsa2012-34.html
URL	http://www.mozilla.org/security/announce/2012/mfsa2012-36.html
URL	http://www.mozilla.org/security/announce/2012/mfsa2012-37.html
URL	http://www.mozilla.org/security/announce/2012/mfsa2012-38.html
URL	http://www.mozilla.org/security/announce/2012/mfsa2012-39.html
URL	http://www.mozilla.org/security/announce/2012/mfsa2012-40.html
URL	http://www.mozilla.org/security/known-vulnerabilities/