CVE-2012-5839
- EPSS 5.21%
- Published 21.11.2012 12:55:03
- Last modified 11.04.2025 00:51:21
Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows ...
CVE-2012-5840
- EPSS 4.32%
- Published 21.11.2012 12:55:03
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attac...
CVE-2012-5841
- EPSS 1.54%
- Published 21.11.2012 12:55:03
- Last modified 11.04.2025 00:51:21
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write acti...
CVE-2012-5842
- EPSS 1.78%
- Published 21.11.2012 12:55:03
- Last modified 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a deni...
CVE-2012-4207
- EPSS 1.71%
- Published 21.11.2012 12:55:02
- Last modified 11.04.2025 00:51:21
The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in pro...
CVE-2012-4209
- EPSS 2.07%
- Published 21.11.2012 12:55:02
- Last modified 11.04.2025 00:51:21
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which make...
CVE-2012-4214
- EPSS 4.32%
- Published 21.11.2012 12:55:02
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attac...
CVE-2012-4215
- EPSS 4.32%
- Published 21.11.2012 12:55:02
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote ...
CVE-2012-4216
- EPSS 6.39%
- Published 21.11.2012 12:55:02
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to exe...
CVE-2012-4201
- EPSS 2.61%
- Published 21.11.2012 12:55:01
- Last modified 11.04.2025 00:51:21
The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code...