Mozilla Firefox is an open source web browser.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-0461, CVE-2012-0462, CVE-2012-0464)

Two flaws were found in the way Firefox parsed certain Scalable Vector Graphics (SVG) image files. A web page containing a malicious SVG image file could cause an information leak, or cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-0456, CVE-2012-0457)

A flaw could allow a malicious site to bypass intended restrictions, possibly leading to a cross-site scripting (XSS) attack if a user were tricked into dropping a 'javascript:' link onto a frame.
(CVE-2012-0455)

It was found that the home page could be set to a 'javascript:' link.
If a user were tricked into setting such a home page by dragging a link to the home button, it could cause Firefox to repeatedly crash, eventually leading to arbitrary code execution with the privileges of the user running Firefox. (CVE-2012-0458)

A flaw was found in the way Firefox parsed certain web content containing 'cssText'. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2012-0459)

It was found that by using the DOM fullscreen API, untrusted content could bypass the mozRequestFullscreen security protections. A web page containing malicious web content could exploit this API flaw to cause user interface spoofing. (CVE-2012-0460)

A flaw was found in the way Firefox handled pages with multiple Content Security Policy (CSP) headers. This could lead to a cross-site scripting attack if used in conjunction with a website that has a header injection flaw. (CVE-2012-0451)

For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 10.0.3 ESR. You can find a link to the Mozilla advisories in the References section of this erratum.

This update also fixes the following bugs :

  - When using the Traditional Chinese locale (zh-TW), a     segmentation fault sometimes occurred when closing     Firefox.

  - Inputting any text in the Web Console (Tools -> Web     Developer -> Web Console) caused Firefox to crash.

All Firefox users should upgrade to these updated packages, which contain Firefox version 10.0.3 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed content.
Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0461, CVE-2012-0462, CVE-2012-0464)

Two flaws were found in the way Thunderbird parsed certain Scalable Vector Graphics (SVG) image files. An HTML mail message containing a malicious SVG image file could cause an information leak, or cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0456, CVE-2012-0457)

A flaw could allow malicious content to bypass intended restrictions, possibly leading to a cross-site scripting (XSS) attack if a user were tricked into dropping a 'javascript:' link onto a frame.
(CVE-2012-0455)

It was found that the home page could be set to a 'javascript:' link.
If a user were tricked into setting such a home page by dragging a link to the home button, it could cause Firefox to repeatedly crash, eventually leading to arbitrary code execution with the privileges of the user running Firefox. A similar flaw was found and fixed in Thunderbird. (CVE-2012-0458)

A flaw was found in the way Thunderbird parsed certain, remote content containing 'cssText'. Malicious, remote content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0459)

It was found that by using the DOM fullscreen API, untrusted content could bypass the mozRequestFullscreen security protections. Malicious content could exploit this API flaw to cause user interface spoofing.
(CVE-2012-0460)

A flaw was found in the way Thunderbird handled content with multiple Content Security Policy (CSP) headers. This could lead to a cross-site scripting attack if used in conjunction with a website that has a header injection flaw. (CVE-2012-0451)

Note: All issues except CVE-2012-0456 and CVE-2012-0457 cannot be exploited by a specially crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 10.0.3 ESR, which corrects these issues.
After installing the update, Thunderbird must be restarted for the changes to take effect.

The remote Solaris system is missing necessary patches to address security updates :

  - CRLF injection vulnerability in Mozilla Firefox 4.x     through 10.0, Firefox ESR 10.x before 10.0.3,     Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x     before 10.0.3, and SeaMonkey before 2.8 allows remote     web servers to bypass intended Content Security Policy     (CSP) restrictions and possibly conduct cross-site     scripting (XSS) attacks via crafted HTTP headers.
    (CVE-2012-0451)

  - Mozilla Firefox before 3.6.28 and 4.x through 10.0,     Firefox ESR 10.x before 10.0.3, Thunderbird before     3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before     10.0.3, and SeaMonkey before 2.8 do not properly     restrict drag-and-drop operations on javascript: URLs,     which allows user-assisted remote attackers to conduct     cross-site scripting (XSS) attacks via a crafted web     page, related to a 'DragAndDropJacking' issue.
    (CVE-2012-0455)

  - The SVG Filters implementation in Mozilla Firefox before     3.6.28 and 4.x through 10.0, Firefox ESR 10.x before     10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0,     Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before     2.8 might allow remote attackers to obtain sensitive     information from process memory via vectors that trigger     an out-of-bounds read. (CVE-2012-0456)

  - Use-after-free vulnerability in the     nsSMILTimeValueSpec::ConvertBetweenTimeContainer     function in Mozilla Firefox before 3.6.28 and 4.x     through 10.0, Firefox ESR 10.x before 10.0.3,     Thunderbird before 3.1.20 and 5.0 through 10.0,     Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before     2.8 might allow remote attackers to execute arbitrary     code via an SVG animation. (CVE-2012-0457)

  - Mozilla Firefox before 3.6.28 and 4.x through 10.0,     Firefox ESR 10.x before 10.0.3, Thunderbird before     3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before     10.0.3, and SeaMonkey before 2.8 do not properly     restrict setting the home page through the dragging of a     URL to the home button, which allows user-assisted     remote attackers to execute arbitrary JavaScript code     with chrome privileges via a javascript: URL that is     later interpreted in the about:sessionrestore context.
    (CVE-2012-0458)

  - The Cascading Style Sheets (CSS) implementation in     Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x     before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird     ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows     remote attackers to cause a denial of service     (application crash) or possibly execute arbitrary code     via dynamic modification of a keyframe followed by     access to the cssText of the keyframe. (CVE-2012-0459)

  - Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x     before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird     ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not     properly restrict write access to the window.fullScreen     object, which allows remote attackers to spoof the user     interface via a crafted web page. (CVE-2012-0460)

  - Multiple unspecified vulnerabilities in the browser     engine in Mozilla Firefox before 3.6.28 and 4.x through     10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before     3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before     10.0.3, and SeaMonkey before 2.8 allow remote attackers     to cause a denial of service (memory corruption and     application crash) or possibly execute arbitrary code     via unknown vectors. (CVE-2012-0461)

  - Multiple unspecified vulnerabilities in the browser     engine in Mozilla Firefox 4.x through 10.0, Firefox ESR     10.x before 10.0.3, Thunderbird 5.0 through 10.0,     Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before     2.8 allow remote attackers to cause a denial of service     (memory corruption and application crash) or possibly     execute arbitrary code via unknown vectors.
    (CVE-2012-0462)

  - Use-after-free vulnerability in the browser engine in     Mozilla Firefox before 3.6.28 and 4.x through 10.0,     Firefox ESR 10.x before 10.0.3, Thunderbird before     3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before     10.0.3, and SeaMonkey before 2.8 allows remote attackers     to execute arbitrary code via vectors involving an empty     argument to the array.join function in conjunction with     the triggering of garbage collection. (CVE-2012-0464)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
61282	Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20120314)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
61283	Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120314)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
80606	Oracle Solaris Third-Party Patch Update : firefox (multiple_vulnerabilities_in_firefox_web)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	high

检测

插件搜索

high

high

high