Lucene search

K
freebsdFreeBSD380E8C56-8E32-11E1-9580-4061862B8C22
HistoryApr 24, 2012 - 12:00 a.m.

mozilla -- multiple vulnerabilities

2012-04-2400:00:00
vuxml.freebsd.org
31

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.246 Low

EPSS

Percentile

96.6%

The Mozilla Project reports:

MFSA 2012-20 Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4)
MFSA 2012-21 Multiple security flaws fixed in FreeType v2.4.9
MFSA 2012-22 use-after-free in IDBKeyRange
MFSA 2012-23 Invalid frees causes heap corruption in gfxImageSurface
MFSA 2012-24 Potential XSS via multibyte content processing errors
MFSA 2012-25 Potential memory corruption during font rendering using cairo-dwrite
MFSA 2012-26 WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error
MFSA 2012-27 Page load short-circuit can lead to XSS
MFSA 2012-28 Ambiguous IPv6 in Origin headers may bypass webserver access restrictions
MFSA 2012-29 Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
MFSA 2012-30 Crash with WebGL content using textImage2D
MFSA 2012-31 Off-by-one error in OpenType Sanitizer
MFSA 2012-32 HTTP Redirections and remote content can be read by javascript errors
MFSA 2012-33 Potential site identity spoofing when loading RSS and Atom feeds

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.246 Low

EPSS

Percentile

96.6%