6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
80.3%
Mozilla Firefox is an open source web browser. XULRunner provides the XUL
Runtime environment for Mozilla Firefox.
Multiple flaws were found in the location object implementation in Firefox.
Malicious content could be used to perform cross-site scripting attacks,
bypass the same-origin policy, or cause Firefox to execute arbitrary code.
(CVE-2012-4194, CVE-2012-4195, CVE-2012-4196)
For technical details regarding these flaws, refer to the Mozilla security
advisories for Firefox 10.0.10 ESR. You can find a link to the Mozilla
advisories in the References section of this erratum.
Red Hat would like to thank the Mozilla project for reporting these issues.
Upstream acknowledges Mariusz Mlynski, moz_bug_r_a4, and Antoine
Delignat-Lavaud as the original reporters of these issues.
All Firefox users should upgrade to these updated packages, which contain
Firefox version 10.0.10 ESR, which corrects these issues. After installing
the update, Firefox must be restarted for the changes to take effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 5 | ppc64 | xulrunner-devel | < 10.0.10-1.el5_8 | xulrunner-devel-10.0.10-1.el5_8.ppc64.rpm |
RedHat | 5 | ppc | xulrunner-debuginfo | < 10.0.10-1.el5_8 | xulrunner-debuginfo-10.0.10-1.el5_8.ppc.rpm |
RedHat | 5 | i386 | firefox-debuginfo | < 10.0.10-1.el5_8 | firefox-debuginfo-10.0.10-1.el5_8.i386.rpm |
RedHat | 5 | s390 | firefox | < 10.0.10-1.el5_8 | firefox-10.0.10-1.el5_8.s390.rpm |
RedHat | 6 | s390 | xulrunner-debuginfo | < 10.0.10-1.el6_3 | xulrunner-debuginfo-10.0.10-1.el6_3.s390.rpm |
RedHat | 6 | ppc | xulrunner | < 10.0.10-1.el6_3 | xulrunner-10.0.10-1.el6_3.ppc.rpm |
RedHat | 5 | s390x | firefox-debuginfo | < 10.0.10-1.el5_8 | firefox-debuginfo-10.0.10-1.el5_8.s390x.rpm |
RedHat | 5 | ia64 | xulrunner | < 10.0.10-1.el5_8 | xulrunner-10.0.10-1.el5_8.ia64.rpm |
RedHat | 6 | s390 | firefox | < 10.0.10-1.el6_3 | firefox-10.0.10-1.el6_3.s390.rpm |
RedHat | 5 | s390x | firefox | < 10.0.10-1.el5_8 | firefox-10.0.10-1.el5_8.s390x.rpm |