CVE-2012-1959

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers SCSW during the cross-compartment wrapping of objects, which allows remo...

Same-compartment Security Wrappers can be bypassed — Mozilla

Mozilla developer Bobby Holley found that same-compartment security wrappers SCSW can be bypassed by passing them to another compartment. Cross-compartment wrappers often do not go through SCSW, but have a filtering policy built into them. When an object is wrapped cross-compartment, the SCSW is...

Ubuntu: Security Advisory (USN-1360-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for firefox USN-1360-1

Ubuntu Update for Linux kernel vulnerabilities USN-1360-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13601.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for firefox USN-1360-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5807)

Mozilla Firefox was updated to 10.0.1 to fix critical bugs and security issue. The following security issue has been fixed : - Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5807)

Mozilla Firefox was updated to 10.0.1 to fix critical bugs and security issue. The following security issue has been fixed : - Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs...

MozillaFirefox to 10.0.1 (critical)

MozillaFirefox was updated to 10.0.1 to fix critical bugs and security issue. Following security issue was fixed: CVE-2012-0452: Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this...

Mozilla Firefox/Thunderbird/SeaMonkey "ReadPrototypeBindings()"内存破坏漏洞

BUGTRAQ ID: 51975 CVE ID: CVE-2012-0452 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Mozilla Firefox 10.0.1、Thunderbird 10.0.1、SeaMonkey 2.7之前版本在实现上存在内存破坏漏洞，在处理哈希表单中的XBL绑定时，...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : firefox vulnerability (USN-1360-1)

Andrew McCreight and Olli Pettay discovered a use-after-free vulnerability in the XBL bindings. An attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. CVE-2012-0452. Note that Tenable Network...

Mozilla Products XBL Binding Memory Corruption Vulnerability - (Windows)

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsxblbindmemcrptnvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products XBL Binding Memory Corruption Vulnerability - Windows...

Mozilla Products XBL Binding Memory Corruption Vulnerability (MFSA2012-10) - Windows

Mozilla Firefox/Seamonkey/Thunderbird is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mozilla Products XBL Binding Memory Corruption Vulnerability - (MAC OS X)

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsxblbindmemcrptnvulnmacosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products XBL Binding Memory Corruption Vulnerability - MAC OS X...

Mozilla Products XBL Binding Memory Corruption Vulnerability (MFSA2012-10) - Mac OS X

Mozilla Firefox/Seamonkey/Thunderbird is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

USN-1360-1: Firefox vulnerability

Andrew McCreight and Olli Pettay discovered a use-after-free vulnerability in the XBL bindings. An attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. CVE-2012-0452...

Mandriva Update for firefox MDVSA-2012:017 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2012:017 firefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mozilla Thunderbird 10.x < 10.0.1 Memory Corruption

The installed version of Thunderbird 10.x is earlier than 10.0.1 and is, therefore, potentially affected by a memory corruption vulnerability. A use-after-free error exists in the method 'nsXBLDocumentInfo::ReadPrototypeBindings' and XBL bindings are not properly removed from a hash table in the...

Firefox 10.x < 10.0.1 Memory Corruption

The installed version of Firefox 10.x is earlier than 10.0.1 and is, therefore, potentially affected by a memory corruption vulnerability. A use-after-free error exists in the method 'nsXBLDocumentInfo::ReadPrototypeBindings' and XBL bindings are not properly removed from a hash table in the even...

CVE-2012-0452

Technical details about CVE-2012-0452 are not publicly provided in the connected documents. The initial description lists the vulnerability and affected products, but no further technical specifics or patch information are included here. Monitor for updates.

use after free in nsXBLDocumentInfo::ReadPrototypeBindings — Mozilla

Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This...

Mozilla Firefox XBL Event Handler Tags Removal Memory Corruption (CVE-2007-5339)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, Javascript, various graphics formats, and so on. The browser runs on...