USN-1430-1 已修正 Firefox 中的弱點。此更新提供 Thunderbird 的對應修正。

Bob Clary、Christian Holler、Brian Hackett、Bobby Holley、Gary Kwong、 Hilary Hall、Honza Bambas、Jesse Ruderman、Julian Seward 和 Olli Pettay 發現影響 Firefox 的記憶體安全性問題。如果使用者遭誘騙開啟特製的網頁，攻擊者可惡意利用這些弱點，透過應用程式損毀引發拒絕服務，或可能利用叫用 Firefox 的使用者權限執行程式碼。(CVE-2012-0467、CVE-2012-0468)

Aki Helin 發現，XPConnect 中存在一個釋放後使用弱點。攻擊者可能利用此弱點，以叫用 Firefox 之使用者的權限執行任意程式碼。(CVE-2012-0469)

Atte Kettunen 發現，gfxImageSurface 中的無效釋放可造成堆積損毀。如果使用者遭誘騙開啟惡意的可縮放向量圖形 (SVG) 影像檔案，攻擊者可利用這些弱點，透過應用程式損毀來引發拒絕服務，或可能以叫用 Firefox 之使用者的權限來執行程式碼。
(CVE-2012-0470)

Anne van Kesteren 發現，經由多位元組內容處理錯誤造成的一個潛在跨網站指令碼 (XSS) 弱點。在有跨網站指令碼弱點的情況下，如果使用者遭誘騙而檢視特製的網頁，遠端攻擊者可惡意利用此弱點，修改相同網域中的內容或是竊取機密資料。(CVE-2012-0471)

Matias Juntunen 發現 Firefox 的 WebGL 實作中存在一個弱點，其可能造成讀取非法的視訊記憶體。攻擊者可能會利用這個弱點，透過應用程式損毀來引發拒絕服務。
(CVE-2012-0473)

Jordi Chancel、Eddy Bordi 和 Chris McGowen 發現 Firefox 允許位址列顯示不同於使用者正在造訪之網站的其他網站。這個問題可能導致使用者容易遭受跨網站指令碼 (XSS) 攻擊。在有跨網站指令碼弱點的情況下，如果使用者遭誘騙而檢視特製的網頁，遠端攻擊者可惡意利用此弱點，修改相同網域中的內容或是竊取機密資料。(CVE-2012-0474)

Simone Fabiano 發現 Firefox 未在連線 IPv6 網站時總是傳送正確的原始標頭。
攻擊者可能利用這個弱點，繞過預定的存取控制。(CVE-2012-0475)

Masato Kinugawa 發現，在 ISO-2022-KR 和 ISO-2022-CN 字元集解碼期間，可能導致跨網站指令碼 (XSS) 插入攻擊。在有跨網站指令碼弱點的情況下，如果使用者遭誘騙而檢視特製的網頁，遠端攻擊者可惡意利用此弱點，修改相同網域中的內容或是竊取機密資料。(CVE-2012-0477)

據發現，使用 WebGL 轉譯的特定影像可導致 Firefox 損毀。若使用者遭誘騙開啟特製的頁面，攻擊者可惡意利用此弱點，透過應用程式損毀引發拒絕服務，或可能以叫用 Firefox 的使用者權限執行程式碼。(CVE-2012-0478)

Mateusz Jurczyk 發現 OpenType 清理程式中存在一個差一錯誤。若使用者遭誘騙開啟特製的頁面，攻擊者可惡意利用此弱點，透過應用程式損毀引發拒絕服務，或可能以叫用 Firefox 的使用者權限執行程式碼。(CVE-2011-3062)

Daniel Divricean 發現，當錯誤處置 JavaScript 錯誤時存在一個缺失，可能造成伺服器上 JavaScript 檔案的檔名和位置發生洩漏。這可能導致不小心的資訊洩漏，以及可引發進一步攻擊的向量。(CVE-2011-1187)

Jeroen van der Gun 發現，Firefox 處置 RSS 及 Atom 摘要的方式中存在一個弱點。經由 HTTPS 載入的 RSS 或 ATOM 內容無效，造成位置列更新成此內容的位址，然而主視窗仍顯示先前所載入的內容。攻擊者可能利用這個弱點引發網路釣魚攻擊。(CVE-2012-0479)。

遠端主機受到 GLSA-201301-01 中所述的弱點影響 (Mozilla 產品：多個弱點)

在 Mozilla Firefox、Thunderbird、SeaMonkey、NSS、GNU IceCat 與 XULRunner 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可引誘使用者檢視特製的網頁或電子郵件，進而可能導致執行任意程式碼或拒絕服務情況。此外，遠端攻擊者或許能夠執行攔截式攻擊、取得敏感資訊、繞過限制及保護機制、強制檔案下載、發動 XML 插入攻擊、發動 XSS 攻擊、繞過同源原則、偽造 URL 以發動網路釣魚攻擊、觸發垂直捲動、偽造位置列、偽造 SSL 指示器、修改瀏覽器的字型、發動點擊劫持攻擊，或造成其他不明的影響。
 本機攻擊者可取得提升的權限、取得敏感資訊，或取代任意下載檔案。
 因應措施：

目前尚無已知的因應措施。

Versions of Mozilla Thunderbird prior to 12.0 are affected by the following security issues :

 - An error exists with handling JavaScript errors that could lead to information disclosure. (CVE-2011-1187)
 - An off-by-one error exists in the 'OpenType Sanitizer' that could lead to out-bounds-reads and possible code execution. (CVE-2011-3062)
 - Memory safety issues exist that could lead to arbitrary code execution. (CVE-2012-0467, CVE-2012-0468)
 - A use-after-free error exists related to 'IDBKeyRange' of 'indexedDB'. (CVE-2012-0469)
 - Heap-corruption errors exist related to 'gfxImageSurface' that could lead to possible code execution. (CVE-2012-0470)
 - A multi-octet encoding issue exists that could allow cross-site scripting attacks as certain octets in multibyte character sets can destroy following octets. (CVE-2012-0471)
 - An error exists related to font rendering with 'cairo-dwrite' that could cause memory corruption leading to crashes and potentially code execution. (CVE-2012-0472)
 - An error exists in 'WebGLBuffer' that could lead to the reading of illegal video memory. (CVE-2012-0473)
 - An unspecified error could allow URL bar spoofing. (CVE-2012-0474)
 - IPv6 addresses and cross-site 'XHR' or 'WebSocket' connections on non-standard ports could allow this application to send ambiguous origin headers. (CVE-2012-0475)
 - A decoding issue exists related to 'ISO-2022-KR' and 'ISO-2022-CN' character sets that could lead to cross-site scripting attacks. (CVE-2012-0477)
 - An error exists related to 'WebGL' and 'texImage2D' that could allow application crashes and possibly code execution when 'JSVAL_TO_OBJECT' is used on ordinary objects. (CVE-2012-0478)
 - Address bar spoofing is possible when 'Atom XML' or 'RSS' data is loaded over HTTPS leading to phishing attacks. (CVE-2012-0479)

Versions of Firefox less than 11  are potentially affected by the following security issues :

 - An error exists with handling JavaScript errors that could lead to information disclosure. (CVE-2011-1187)
 - An off-by-one error exists in the 'OpenType Sanitizer' that could lead to out-bounds-reads and possible code execution. (CVE-2011-3062)
 - Memory safety issues exist that could lead to arbitrary code execution. (CVE-2012-0467, CVE-2012-0468)
 - A use-after-free error exists related to 'IDBKeyRange' of 'indexedDB'. (CVE-2012-0469)
 - Heap-corruption errors exist related to 'gfxImageSurface' that could lead to possible code execution. (CVE-2012-0470)
 - A multi-octet encoding issue exists that could allow cross-site scripting attacks as certain octets in multibyte character sets can destroy following octets.(CVE-2012-0471)
 - An error exists related to font rendering with 'cairo-dwrite' that could cause memory corruption leading to crashes and potentially code execution. (CVE-2012-0472)
 - An error exists in 'WebGLBuffer' that could lead to the reading of illegal video memory. (CVE-2012-0473)
 - An unspecified error could allow URL bar spoofing. (CVE-2012-0474)
 - IPv6 addresses and cross-site 'XHR' or 'WebSocket' connections on non-standard ports could allow this application to send ambiguous origin headers. (CVE-2012-0475)
 - A decoding issue exists related to 'ISO-2022-KR' and 'ISO-2022-CN' character sets that could lead to cross-site scripting attacks. (CVE-2012-0477)
 - An error exists related to 'WebGL' and 'texImage2D' that could allow application crashes and possibly code execution when 'JSVAL_TO_OBJECT' is used on ordinary objects. (CVE-2012-0478)
 - Address bar spoofing is possible when 'Atom XML' or 'RSS' data is loaded over HTTPS leading to phishing attacks. (CVE-2012-0479)

Versions of SeaMonkey 2.x earlier than 2.9.0 are potentially affected by the following security issues :

 - An error exists with the handling of JavaScript errors that can lead to information disclosure. (CVE-2011-1187)

  - An off-by-one error exists in the 'OpenType Sanitizer' that can lead to out-bounds-reads and possible code execution. (CVE-2011-3062)

  - Memory safety issues exist which could lead to arbitrary code execution. (CVE-2012-0467, CVE-2012-0468)

  - A use-after-free error exists related to 'IDBKeyRange' of 'indexedDB'. (CVE-2012-0469)

  - Heap-corruption errors exist related to 'gfxImageSurface' which can lead to possible code execution. (CVE-2012-0470)

  - A multi-octet encoding issue exists which could allow cross-site scripting attacks as certain octets in multibyte character sets can destroy following octets.

 (CVE-2012-0471)

  - An error exists related to font rendering with 'cairo- dwrite' which can cause memory corruption leading to crashes and potentially code execution. (CVE-2012-0472)

  - An error exists in 'WebGLBuffer' that can lead to the  reading of illegal video memory. (CVE-2012-0473)

  - An unspecified error can allow URL bar spoofing. (CVE-2012-0474)

  - IPv6 addresses and cross-site 'XHR' or 'WebSocket' connections on non-standard ports can allow this application to send ambiguous origin headers. (CVE-2012-0475)

  - A decoding issue exists related to 'ISO-2022-KR' and 'ISO-2022-CN' character sets which could lead to cross-site scripting attacks. (CVE-2012-0477)

  - An error exists related to 'WebGL' and 'texImage2D' that can allow application crashes and possibly code execution when 'JSVAL_TO_OBJECT' is used on ordinary objects. (CVE-2012-0478)

  - Address bar spoofing is possible when 'Atom XML' or 'RSS' data is loaded over HTTPS leading to phishing attacks. (CVE-2012-0479)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
59015	Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS：thunderbird 弱點 (USN-1430-3)	Nessus	Ubuntu Local Security Checks	2012/5/7	2019/9/19	critical
63402	GLSA-201301-01：Mozilla 產品：多個弱點 (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2025/10/6	critical
6792	Mozilla Thunderbird < 12.0 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2013/5/6	2019/3/6	high
6790	Mozilla Firefox < 12.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/5/6	2019/3/6	high
6791	SeaMonkey 2.x < 2.9.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2013/5/6	2019/3/6	high

检测

插件搜索

critical

critical

high

high

high