mozilla: code execution [LWN.net]

Package(s):

firefox, thunderbird, seamonkey, xulrunner

CVE #(s):

CVE-2012-4193

Created:

October 15, 2012

Updated:

October 17, 2012

Description:

From the Red Hat advisory:

A flaw was found in the way XULRunner handled security wrappers. A web page containing malicious content could possibly cause an application linked against XULRunner (such as Mozilla Firefox) to execute arbitrary code with the privileges of the user running the application.

Alerts:

Red Hat	RHSA-2012:1361-01	2012-10-12
Red Hat	RHSA-2012:1362-01	2012-10-12
Ubuntu	USN-1611-1	2012-10-12
CentOS	CESA-2012:1361	2012-10-12
CentOS	CESA-2012:1361	2012-10-13
CentOS	CESA-2012:1362	2012-10-13
CentOS	CESA-2012:1362	2012-10-13
Oracle	ELSA-2012-1361	2012-10-12
Oracle	ELSA-2012-1361	2012-10-13
Oracle	ELSA-2012-1362	2012-10-12
Mandriva	MDVSA-2012:167	2012-10-13
openSUSE	openSUSE-SU-2012:1345-1	2012-10-15
Scientific Linux	SL-xulr-20121015	2012-10-15
Scientific Linux	SL-thun-20121015	2012-10-15
Mageia	MGASA-2012-0295	2012-10-16
Mageia	MGASA-2012-0296	2012-10-16
SUSE	SUSE-SU-2012:1351-1	2012-10-16
Mageia	MGASA-2012-0353	2012-12-07
Gentoo	201301-01	2013-01-07

(Log in to post comments)