mozilla -- multiple vulnerabilities

Description:

The Mozilla Project reports:

MFSA 2012-01 Miscellaneous memory safety hazards (rv:10.0/ rv:1.9.2.26)

MFSA 2012-02 Overly permissive IPv6 literal syntax

MFSA 2012-03 iframe element exposed across domains via name attribute

MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal of nodes

MFSA 2012-05 Frame scripts calling into untrusted objects bypass security checks

MFSA 2012-06 Uninitialized memory appended when encoding icon images may cause information disclosure

MFSA 2012-07 Potential Memory Corruption When Decoding Ogg Vorbis files

MFSA 2012-08 Crash with malformed embedded XSLT stylesheets

MFSA 2012-09 Firefox Recovery Key.html is saved with unsafe permission

References:

• CVE name CVE-2012-0442
• CVE name CVE-2012-0443
• CVE name CVE-2011-3670
• CVE name CVE-2012-0445
• CVE name CVE-2011-3659
• CVE name CVE-2012-0446
• CVE name CVE-2012-0447
• CVE name CVE-2012-0449
• CVE name CVE-2012-0450
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-01.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-02.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-03.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-04.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-05.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-06.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-07.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-08.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-09.html>

Affects:

• firefox >4.0,1 <10.0,1
• firefox >=3.6.*,1 <3.6.26
• linux-firefox <10.0,1
• linux-seamonkey <2.7
• linux-thunderbird <10.0
• seamonkey <2.7
• thunderbird >4.0 <10.0
• thunderbird >3.1.* <3.1.18

Disclaimer: The data contained on this page is derived from the VuXML document, please refer to the the original document for copyright information. The author of portaudit makes no claim of authorship or ownership of any of the information contained herein.

If you have found a vulnerability in a FreeBSD port not listed in the database, please contact the FreeBSD Security Team. Refer to "FreeBSD Security Information" for more information.