CVE

Id
57231  
CVE No.
CVE-2012-3988  
Status
Candidate  
Description
Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.  
Phase
Assigned (20120711)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
591230 57231 CVE-2012-3988 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-79.html  View
591231 57231 CVE-2012-3988 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=725770  View
591232 57231 CVE-2012-3988 MANDRIVA:MDVSA-2012:163  View
591233 57231 CVE-2012-3988 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:163  View
591234 57231 CVE-2012-3988 REDHAT:RHSA-2012:1351  View
591235 57231 CVE-2012-3988 URL:http://rhn.redhat.com/errata/RHSA-2012-1351.html  View
591236 57231 CVE-2012-3988 SUSE:SUSE-SU-2012:1351  View
591237 57231 CVE-2012-3988 URL:http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html  View
591238 57231 CVE-2012-3988 UBUNTU:USN-1611-1  View
591239 57231 CVE-2012-3988 URL:http://www.ubuntu.com/usn/USN-1611-1  View
591240 57231 CVE-2012-3988 OSVDB:86109  View
591241 57231 CVE-2012-3988 URL:http://osvdb.org/86109  View
591242 57231 CVE-2012-3988 OVAL:oval:org.mitre.oval:def:16334  View
591243 57231 CVE-2012-3988 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16334  View
591244 57231 CVE-2012-3988 SECUNIA:50856  View
591245 57231 CVE-2012-3988 URL:http://secunia.com/advisories/50856  View
591246 57231 CVE-2012-3988 SECUNIA:50892  View
591247 57231 CVE-2012-3988 URL:http://secunia.com/advisories/50892  View
591248 57231 CVE-2012-3988 SECUNIA:50904  View
591249 57231 CVE-2012-3988 URL:http://secunia.com/advisories/50904  View
591250 57231 CVE-2012-3988 SECUNIA:50935  View
591251 57231 CVE-2012-3988 URL:http://secunia.com/advisories/50935  View
591252 57231 CVE-2012-3988 SECUNIA:50936  View
591253 57231 CVE-2012-3988 URL:http://secunia.com/advisories/50936  View
591254 57231 CVE-2012-3988 SECUNIA:50984  View
591255 57231 CVE-2012-3988 URL:http://secunia.com/advisories/50984  View
591256 57231 CVE-2012-3988 SECUNIA:55318  View
591257 57231 CVE-2012-3988 URL:http://secunia.com/advisories/55318  View
591258 57231 CVE-2012-3988 XF:firefox-full-screen-code-exec(79149)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29199 JVNDB-2012-004906 複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性 複数の Mozilla 製品の Chrome Object Wrapper (COW) の実装は、InstallTrigger メソッドの失敗を適切に対話処理しないため、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-3993 57231 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004906.html  View