[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Arbitrary code execution vulnerability in Mozilla Firefox, Thunderbird and SeaMonkey via a crafted web site - MFSA 2012-80

ID: oval:org.secpod.oval:def:7602Date: (C)2012-10-26   (M)2024-03-27
Class: PATCHFamily: windows




The host is missing a security update according to Mozilla advisory, MFSA 2012-80. The update is required to fix an arbitrary code execution vulnerability. A flaw is present in the applications, which fail to properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object. Successful exploitation could allow attackers to execute arbitrary code or cause a denial of service (assertion failure).

Platform:
Microsoft Windows Server 2022
Microsoft Windows 11
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows 10
Product:
Mozilla Firefox
Mozilla SeaMonkey
Mozilla Thunderbird
Reference:
CVE-2012-3989
MFSA 2012-80
CVE    1
CVE-2012-3989
CPE    6
cpe:/a:mozilla:seamonkey:::x86
cpe:/a:mozilla:thunderbird:::x86
cpe:/a:mozilla:firefox:::x86
cpe:/a:mozilla:thunderbird
...

© SecPod Technologies