Arbitrary code execution vulnerability in the Style Inspector in Mozilla Firefox - MFSA 2012-104 (Mac OS)ID: oval:org.secpod.oval:def:8061 | Date: (C)2012-11-30 (M)2023-11-19 |
Class: PATCH | Family: macos |
The host is missing a critical security update according to MFSA 2012-104. The update is required to fix arbitrary code execution vulnerability. A flaw is present in the applications, which fail to properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences. Successful exploitation allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.
Platform: |
Apple Mac OS 14 |
Apple Mac OS 13 |
Apple Mac OS 12 |
Apple Mac OS 11 |
Apple Mac OS X 10.15 |
Apple Mac OS X 10.14 |
Apple Mac OS X 10.13 |
Apple Mac OS X 10.11 |
Apple Mac OS X 10.12 |
Product: |
Mozilla Firefox |
Mozilla Thunderbird |
Mozilla SeaMonkey |