mozilla -- multiple vulnerabilities

Description:

The Mozilla Project reports:

MFSA 2012-91 Miscellaneous memory safety hazards (rv:17.0/ rv:10.0.11)

MFSA 2012-92 Buffer overflow while rendering GIF images

MFSA 2012-93 evalInSanbox location context incorrectly applied

MFSA 2012-94 Crash when combining SVG text on path with CSS

MFSA 2012-95 Javascript: URLs run in privileged context on New Tab page

MFSA 2012-96 Memory corruption in str_unescape

MFSA 2012-97 XMLHttpRequest inherits incorrect principal within sandbox

MFSA 2012-98 Firefox installer DLL hijacking

MFSA 2012-99 XrayWrappers exposes chrome-only properties when not in chrome compartment

MFSA 2012-100 Improper security filtering for cross-origin wrappers

MFSA 2012-101 Improper character decoding in HZ-GB-2312 charset

MFSA 2012-102 Script entered into Developer Toolbar runs with chrome privileges

MFSA 2012-103 Frames can shadow top.location

MFSA 2012-104 CSS and HTML injection through Style Inspector

MFSA 2012-105 Use-after-free and buffer overflow issues found

MFSA 2012-106 Use-after-free, buffer overflow, and memory corruption issues found using Address Sanitizer

References:

• CVE name CVE-2012-4201
• CVE name CVE-2012-4202
• CVE name CVE-2012-4203
• CVE name CVE-2012-4204
• CVE name CVE-2012-4205
• CVE name CVE-2012-4206
• CVE name CVE-2012-4207
• CVE name CVE-2012-4208
• CVE name CVE-2012-4209
• CVE name CVE-2012-4210
• CVE name CVE-2012-4212
• CVE name CVE-2012-4213
• CVE name CVE-2012-4214
• CVE name CVE-2012-4215
• CVE name CVE-2012-4216
• CVE name CVE-2012-4217
• CVE name CVE-2012-4218
• CVE name CVE-2012-5829
• CVE name CVE-2012-5830
• CVE name CVE-2012-5833
• CVE name CVE-2012-5835
• CVE name CVE-2012-5836
• CVE name CVE-2012-5837
• CVE name CVE-2012-5838
• CVE name CVE-2012-5839
• CVE name CVE-2012-5840
• CVE name CVE-2012-5841
• CVE name CVE-2012-5842
• CVE name CVE-2012-5843
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-90.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-91.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-92.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-93.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-94.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-95.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-96.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-97.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-98.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-99.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-100.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-101.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-102.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-103.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-104.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-105.html>
• URL: <http://www.mozilla.org/security/announce/2012/mfsa2012-106.html>
• URL: <http://www.mozilla.org/security/known-vulnerabilities/>

Affects:

• firefox >11.0,1 <17.0,1
• firefox <10.0.11,1
• linux-firefox <10.0.11,1
• linux-seamonkey <2.14
• linux-thunderbird <10.0.11
• seamonkey <2.14
• thunderbird >11.0 <17.0
• thunderbird <10.0.11
• libxul >1.9.2.* <10.0.11

Disclaimer: The data contained on this page is derived from the VuXML document, please refer to the the original document for copyright information. The author of portaudit makes no claim of authorship or ownership of any of the information contained herein.

If you have found a vulnerability in a FreeBSD port not listed in the database, please contact the FreeBSD Security Team. Refer to "FreeBSD Security Information" for more information.