10 - DSA-2514

Executive Summary

Summary
Title	iceweasel security update

Informations
Name	DSA-2514	First vendor Publication	2012-07-17
Vendor	Debian	Last vendor Modification	2012-07-17
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.

CVE-2012-1948

Benoit Jacob, Jesse Ruderman, Christian Holler, and Bill McCloskey identified several memory safety problems that may lead to the execution of arbitrary code.

CVE-2012-1950

Mario Gomes and Code Audit Labs discovered that it is possible to force iceweasel to display the URL of the previous entered site through drag and drop actions to the address bar. This can be abused to perform phishing attacks.

CVE-2012-1954

Abhishek Arya discovered a use-after-free problem in nsDocument::AdoptNode that may lead to the execution of arbitrary code.

CVE-2012-1966

moz_bug_r_a4 discovered that it is possible to perform cross-site scripting attacks through the context menu when using data: URLs.

CVE-2012-1967

moz_bug_r_a4 discovered that in certain cases, javascript: URLs can be executed so that scripts can escape the JavaScript sandbox and run with elevated privileges.

Note: We'd like to advise users of Iceweasel's 3.5 branch in Debian stable to consider to upgrade to the Iceweasel 10.0 ESR (Extended Support Release) which is now available in Debian Backports. Although Debian will continue to support Iceweasel 3.5 in stable with security updates, this can only be done on a best effort base as upstream provides no such support anymore. On top of that, the 10.0 branch adds proactive security features to the browser.

For the stable distribution (squeeze), this problem has been fixed in version 3.5.16-17.

For the unstable distribution (sid), this problem has been fixed in version 10.0.6esr-1.

We recommend that you upgrade your iceweasel packages.

Original Source

Url : http://www.debian.org/security/2012/dsa-2514

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-399	Resource Management Errors
50 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16744

Oval ID:	oval:org.mitre.oval:def:16744
Title:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-1948	Version:	21
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 13.0 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 5.0 AND Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Determine if the version of Mozilla Seamonkey is less than or equal to 2.10 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is less than or equal to 13.0 AND Mozilla Firefox Mainline version is greater than or equal to 4.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 10.0.6 and greater than or equal to 10.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 10.0.6 and greater than or equal to 10.x

Definition Id: oval:org.mitre.oval:def:16970

Oval ID:	oval:org.mitre.oval:def:16970
Title:	The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.
Description:	The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-1950	Version:	8
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000	Product(s):	Mozilla Firefox Mozilla Firefox ESR
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is less than or equal to 13.0 AND Mozilla Firefox Mainline version is greater than or equal to 4.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 10.0.6 and greater than or equal to 10.x

Definition Id: oval:org.mitre.oval:def:16984

Oval ID:	oval:org.mitre.oval:def:16984
Title:	Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.
Description:	Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-1954	Version:	22
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 13.0 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 5.0 AND Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Determine if the version of Mozilla Seamonkey is less than or equal to 2.10 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is less than or equal to 13.0 AND Mozilla Firefox Mainline version is greater than or equal to 4.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 10.0.6 and greater than or equal to 10.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 10.0.6 and greater than or equal to 10.x

Definition Id: oval:org.mitre.oval:def:17025

Oval ID:	oval:org.mitre.oval:def:17025
Title:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-1967	Version:	22
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey Mozilla Firefox ESR Mozilla Thunderbird ESR
Definition Synopsis:
Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is less than or equal to 13.0 AND Determine if the version of Mozilla Thunderbird is greater than or equal to 5.0 AND Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Determine if the version of Mozilla Seamonkey is less than or equal to 2.10 AND Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is less than or equal to 13.0 AND Mozilla Firefox Mainline version is greater than or equal to 4.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 10.0.6 and greater than or equal to 10.x OR Check for vulnerable Mozilla Thunderbird ESR Mozilla Thunderbird ESR is installed AND Mozilla Thunderbird ESR version is less than 10.0.6 and greater than or equal to 10.x

Definition Id: oval:org.mitre.oval:def:17037

Oval ID:	oval:org.mitre.oval:def:17037
Title:	Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for dataattacks via a crafted URL.
Description:	Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-1966	Version:	9
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000	Product(s):	Mozilla Firefox Mozilla Firefox ESR
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is less than or equal to 13.0 AND Mozilla Firefox Mainline version is greater than or equal to 4.0 OR Check for vulnerable Mozilla Firefox ESR Mozilla Firefox ESR is installed AND Mozilla Firefox ESR version is less than 10.0.6 and greater than or equal to 10.x

Definition Id: oval:org.mitre.oval:def:17819

Oval ID:	oval:org.mitre.oval:def:17819
Title:	USN-1509-2 -- ubufox update
Description:	This update provides compatible ubufox packages for the latest Firefox.
Family:	unix	Class:	patch
Reference(s):	USN-1509-2 CVE-2012-1948 CVE-2012-1949 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1960 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04	Product(s):	ubufox
Definition Synopsis:
Release section Ubuntu 12.04 is installed Packages match section ubufox DPKG is earlier than 2.1.1-0ubuntu0.12.04.1 AND xul-ext-ubufox DPKG is earlier than 2.1.1-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed Packages match section ubufox DPKG is earlier than 2.1.1-0ubuntu0.11.10.1 AND xul-ext-ubufox DPKG is earlier than 2.1.1-0ubuntu0.11.10.1 AND Release section Ubuntu 11.04 is installed Packages match section ubufox DPKG is earlier than 2.1.1-0ubuntu0.11.04.1 AND xul-ext-ubufox DPKG is earlier than 2.1.1-0ubuntu0.11.04.1 AND Release section Ubuntu 10.04 is installed Packages match section ubufox DPKG is earlier than 2.1.1-0ubuntu0.10.04.1 AND xul-ext-ubufox DPKG is earlier than 2.1.1-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:17874

Oval ID:	oval:org.mitre.oval:def:17874
Title:	USN-1509-1 -- firefox vulnerabilities
Description:	Several security issues were fixed in Firefox.
Family:	unix	Class:	patch
Reference(s):	USN-1509-1 CVE-2012-1948 CVE-2012-1949 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1960 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 12.04 is installed AND firefox DPKG is earlier than 14.0.1+build1-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND firefox DPKG is earlier than 14.0.1+build1-0ubuntu0.11.10.1 AND Release section Ubuntu 11.04 is installed AND firefox DPKG is earlier than 14.0.1+build1-0ubuntu0.11.04.1 AND Release section Ubuntu 10.04 is installed AND firefox DPKG is earlier than 14.0.1+build1-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:18018

Oval ID:	oval:org.mitre.oval:def:18018
Title:	USN-1510-1 -- thunderbird vulnerabilities
Description:	Several security issues were fixed in Thunderbird.
Family:	unix	Class:	patch
Reference(s):	USN-1510-1 CVE-2012-1948 CVE-2012-1949 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1960 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1967	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04	Product(s):	thunderbird
Definition Synopsis:
Release section Ubuntu 12.04 is installed AND thunderbird DPKG is earlier than 14.0+build1-0ubuntu0.12.04.1 AND Release section Ubuntu 11.10 is installed AND thunderbird DPKG is earlier than 14.0+build1-0ubuntu0.11.10.1 AND Release section Ubuntu 11.04 is installed AND thunderbird DPKG is earlier than 14.0+build1-0ubuntu0.11.04.1 AND Release section Ubuntu 10.04 is installed AND thunderbird DPKG is earlier than 14.0+build1-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:18528

Oval ID:	oval:org.mitre.oval:def:18528
Title:	DSA-2513-1 iceape - several vulnerabilities
Description:	Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey.
Family:	unix	Class:	patch
Reference(s):	DSA-2513-1 CVE-2012-1948 CVE-2012-1954 CVE-2012-1967	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	iceape
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND iceape DPKG is earlier than 2.0.11-14

Definition Id: oval:org.mitre.oval:def:18598

Oval ID:	oval:org.mitre.oval:def:18598
Title:	DSA-2528-1 icedove - several
Description:	Several vulnerabilities were discovered in Icedove, Debian's version of the Mozilla Thunderbird mail and news client.
Family:	unix	Class:	patch
Reference(s):	DSA-2528-1 CVE-2012-1948 CVE-2012-1950 CVE-2012-1954 CVE-2012-1967	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	icedove
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND icedove DPKG is earlier than 3.0.11-1+squeeze12

Definition Id: oval:org.mitre.oval:def:19963

Oval ID:	oval:org.mitre.oval:def:19963
Title:	DSA-2514-1 iceweasel - several vulnerabilities
Description:	Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.
Family:	unix	Class:	patch
Reference(s):	DSA-2514-1 CVE-2012-1948 CVE-2012-1950 CVE-2012-1954 CVE-2012-1966 CVE-2012-1967	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	iceweasel
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND iceweasel DPKG is earlier than 0:3.5.16-17

Definition Id: oval:org.mitre.oval:def:21282

Oval ID:	oval:org.mitre.oval:def:21282
Title:	RHSA-2012:1089: thunderbird security update (Critical)
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:1089-01 CESA-2012:1089 CVE-2012-1948 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1967	Version:	185
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	thunderbird
Definition Synopsis:
Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND thunderbird is earlier than 0:10.0.6-1.el5_8 OR Centos 5 section The operating system installed on the system is CentOS Linux 5.x AND thunderbird is earlier than 0:10.0.6-1.el5.centos OR Redhat 6 section thunderbird is earlier than 0:10.0.6-1.el6_3 AND The operating system installed on the system is Red Hat Enterprise Linux 6 OR Centos 6 section thunderbird is earlier than 0:10.0.6-1.el6.centos AND The operating system installed on the system is CentOS Linux 6.x

Definition Id: oval:org.mitre.oval:def:21520

Oval ID:	oval:org.mitre.oval:def:21520
Title:	RHSA-2012:1088: firefox security update (Critical)
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:1088-01 CESA-2012:1088 CVE-2012-1948 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967	Version:	224
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
Redhat 5 and Centos 5 section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND Packages section xulrunner-devel is earlier than 0:10.0.6-2.el5_8 AND xulrunner is earlier than 0:10.0.6-2.el5_8 OR Centos 5 section The operating system installed on the system is CentOS Linux 5.x AND firefox is earlier than 0:10.0.6-1.el5.centos OR Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND firefox is earlier than 0:10.0.6-1.el5_8 OR Redhat 6 section The operating system installed on the system is Red Hat Enterprise Linux 6 AND Packages section xulrunner-devel is earlier than 0:10.0.6-1.el6_3 AND xulrunner is earlier than 0:10.0.6-1.el6_3 AND firefox is earlier than 0:10.0.6-1.el6_3 OR Centos 6 section The operating system installed on the system is CentOS Linux 6.x AND Packages section xulrunner-devel is earlier than 0:10.0.6-1.el6.centos AND xulrunner is earlier than 0:10.0.6-1.el6.centos AND firefox is earlier than 0:10.0.6-1.el6.centos

Definition Id: oval:org.mitre.oval:def:22890

Oval ID:	oval:org.mitre.oval:def:22890
Title:	DEPRECATED: ELSA-2012:1089: thunderbird security update (Critical)
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:1089-01 CVE-2012-1948 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1967	Version:	62
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	thunderbird
Definition Synopsis:
rpm test Oracle Linux 5.x AND thunderbird is earlier than 0:10.0.6-1.el5_8 OR rpm test thunderbird is earlier than 0:10.0.6-1.el6_3 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:23142

Oval ID:	oval:org.mitre.oval:def:23142
Title:	DEPRECATED: ELSA-2012:1088: firefox security update (Critical)
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:1088-01 CVE-2012-1948 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967	Version:	74
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test xulrunner-devel is earlier than 0:10.0.6-2.el5_8 AND xulrunner is earlier than 0:10.0.6-2.el5_8 AND firefox is earlier than 0:10.0.6-1.el5_8 OR rpm test Oracle Linux 6.x AND rpm test xulrunner-devel is earlier than 0:10.0.6-1.el6_3 AND xulrunner is earlier than 0:10.0.6-1.el6_3 AND firefox is earlier than 0:10.0.6-1.el6_3

Definition Id: oval:org.mitre.oval:def:23757

Oval ID:	oval:org.mitre.oval:def:23757
Title:	ELSA-2012:1089: thunderbird security update (Critical)
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:1089-01 CVE-2012-1948 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1967	Version:	61
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	thunderbird
Definition Synopsis:
rpm test Oracle Linux 5.x AND thunderbird is earlier than 0:10.0.6-1.el5_8 OR rpm test thunderbird is earlier than 0:10.0.6-1.el6_3 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:23937

Oval ID:	oval:org.mitre.oval:def:23937
Title:	ELSA-2012:1088: firefox security update (Critical)
Description:	Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:1088-01 CVE-2012-1948 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967	Version:	73
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test xulrunner-devel is earlier than 0:10.0.6-2.el5_8 AND xulrunner is earlier than 0:10.0.6-2.el5_8 AND firefox is earlier than 0:10.0.6-1.el5_8 OR rpm test Oracle Linux 6.x AND rpm test xulrunner-devel is earlier than 0:10.0.6-1.el6_3 AND xulrunner is earlier than 0:10.0.6-1.el6_3 AND firefox is earlier than 0:10.0.6-1.el6_3

Definition Id: oval:org.mitre.oval:def:27116

Oval ID:	oval:org.mitre.oval:def:27116
Title:	DEPRECATED: ELSA-2012-1089 -- thunderbird security update (critical)
Description:	[10.0.6-1.0.1.el6_3] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball [10.0.6-1] - Update to 10.0.6 ESR
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-1089 CVE-2012-1948 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1967	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 6.x AND thunderbird is earlier than 0:10.0.6-1.0.1.el6_3

Definition Id: oval:org.mitre.oval:def:27863

Oval ID:	oval:org.mitre.oval:def:27863
Title:	DEPRECATED: ELSA-2012-1088 -- firefox security update (critical)
Description:	firefox [10.0.6-1.0.1.el6_3] - Replace firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js [10.0.6-1] - Update to 10.0.6 ESR [10.0.5-3] - Enabled WebM [10.0.5-2] - Added fix for mozbz#703633, rhbz#818341 xulrunner [10.0.6-1.0.1.el6_3] - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js [10.0.6-1] - Update to 10.0.6 ESR [10.0.5-3] - Added fix for rhbz#808136 (mozbz#762301) [10.0.5-2] - Enabled WebM (rhbz#798880)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-1088 CVE-2012-1948 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	firefox xulrunner
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section firefox is earlier than 0:10.0.6-1.0.1.el5_8 AND xulrunner is earlier than 0:10.0.6-2.0.1.el5_8 AND xulrunner-devel is earlier than 0:10.0.6-2.0.1.el5_8 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section firefox is earlier than 0:10.0.6-1.0.1.el6_3 AND xulrunner is earlier than 0:10.0.6-1.0.1.el6_3 AND xulrunner-devel is earlier than 0:10.0.6-1.0.1.el6_3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:2.3:a:mozilla:firefox:13.0:::::::* cpe:2.3:a:mozilla:firefox:12.0:-:::::: cpe:2.3:a:mozilla:firefox:12.0:beta6:::::: cpe:2.3:a:mozilla:firefox:11.0:::::::* cpe:2.3:a:mozilla:firefox:10.0.5:::::::* cpe:2.3:a:mozilla:firefox:10.0.4:::::::* cpe:2.3:a:mozilla:firefox:10.0.3:::::::* cpe:2.3:a:mozilla:firefox:10.0.2:::::::* cpe:2.3:a:mozilla:firefox:10.0.1:::::::* cpe:2.3:a:mozilla:firefox:10.0:::::::* cpe:2.3:a:mozilla:firefox:9.0.1:::::::* cpe:2.3:a:mozilla:firefox:9.0:::::::* cpe:2.3:a:mozilla:firefox:8.0.1:::::::* cpe:2.3:a:mozilla:firefox:8.0:::::::* cpe:2.3:a:mozilla:firefox:7.0.1:::::::* cpe:2.3:a:mozilla:firefox:7.0:::::::* cpe:2.3:a:mozilla:firefox:6.0.2:::::::* cpe:2.3:a:mozilla:firefox:6.0.1:::::::* cpe:2.3:a:mozilla:firefox:6.0:::::::* cpe:2.3:a:mozilla:firefox:5.0.1:::::::* cpe:2.3:a:mozilla:firefox:5.0:::::::* cpe:2.3:a:mozilla:firefox:4.0.1:::::::* cpe:2.3:a:mozilla:firefox:4.0:beta1:::::: cpe:2.3:a:mozilla:firefox:4.0:beta6:::::: cpe:2.3:a:mozilla:firefox:4.0:beta3:::::: cpe:2.3:a:mozilla:firefox:4.0:beta5:::::: cpe:2.3:a:mozilla:firefox:4.0:beta4:::::: cpe:2.3:a:mozilla:firefox:4.0:beta2:::::: cpe:2.3:a:mozilla:firefox:4.0:beta12:::::: cpe:2.3:a:mozilla:firefox:4.0:-:::::: cpe:2.3:a:mozilla:firefox:4.0:beta11:::::: cpe:2.3:a:mozilla:firefox:4.0:beta10:::::: cpe:2.3:a:mozilla:firefox:4.0:beta7:::::: cpe:2.3:a:mozilla:firefox:4.0:beta8:::::: cpe:2.3:a:mozilla:firefox:4.0:beta9::::::	35
Application	Mozilla Seamonkey cpe:2.3:a:mozilla:seamonkey:2.9.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.9:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.9:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.9:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.9:::::::* cpe:2.3:a:mozilla:seamonkey:2.9:beta4:::::: cpe:2.3:a:mozilla:seamonkey:2.8:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.8:beta5:::::: cpe:2.3:a:mozilla:seamonkey:2.8:beta4:::::: cpe:2.3:a:mozilla:seamonkey:2.8:beta6:::::: cpe:2.3:a:mozilla:seamonkey:2.8:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.8:::::::* cpe:2.3:a:mozilla:seamonkey:2.8:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.7.2:::::::* cpe:2.3:a:mozilla:seamonkey:2.7.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.7:beta5:::::: cpe:2.3:a:mozilla:seamonkey:2.7:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.7:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.7:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.7:::::::* cpe:2.3:a:mozilla:seamonkey:2.7:beta4:::::: cpe:2.3:a:mozilla:seamonkey:2.6.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.6:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.6:::::::* cpe:2.3:a:mozilla:seamonkey:2.6:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.6:beta4:::::: cpe:2.3:a:mozilla:seamonkey:2.6:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.5:::::::* cpe:2.3:a:mozilla:seamonkey:2.5:beta4:::::: cpe:2.3:a:mozilla:seamonkey:2.5:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.5:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.5:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.4.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.4:::::::* cpe:2.3:a:mozilla:seamonkey:2.4:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.4:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.4:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.3.3:::::::* cpe:2.3:a:mozilla:seamonkey:2.3.2:::::::* cpe:2.3:a:mozilla:seamonkey:2.3.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.3:::::::* cpe:2.3:a:mozilla:seamonkey:2.3:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.3:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.3:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.2:::::::* cpe:2.3:a:mozilla:seamonkey:2.2:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.2:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.2:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.10:::::::* cpe:2.3:a:mozilla:seamonkey:2.10:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.10:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.10:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:::::: cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:::::: cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:::::: cpe:2.3:a:mozilla:seamonkey:2.1:beta3:::::: cpe:2.3:a:mozilla:seamonkey:2.1:rc1:::::: cpe:2.3:a:mozilla:seamonkey:2.1:rc2:::::: cpe:2.3:a:mozilla:seamonkey:2.1:beta1:::::: cpe:2.3:a:mozilla:seamonkey:2.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.1:beta2:::::: cpe:2.3:a:mozilla:seamonkey:2.0a1pre:::::::* cpe:2.3:a:mozilla:seamonkey:2.0a1::pre::::: cpe:2.3:a:mozilla:seamonkey:2.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.7:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.14:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.13:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.12:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.11:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.10:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:::::: cpe:2.3:a:mozilla:seamonkey:2.0:rc2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:rc1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:::::::* cpe:2.3:a:mozilla:seamonkey:2.:beta3:::::: cpe:2.3:a:mozilla:seamonkey:1.5.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.5.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.5.0.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:::::: cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.19:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.18:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.17:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.16:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.15:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.14:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.13:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.12:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.11:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.1:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.1:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.99:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.0:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.0:::::::* cpe:2.3:a:mozilla:seamonkey:1.0::dev::::: cpe:2.3:a:mozilla:seamonkey:1.0::alpha::::: cpe:2.3:a:mozilla:seamonkey:1.0::beta::::: cpe:2.3:a:mozilla:seamonkey:::::::: cpe:2.3:a:mozilla:seamonkey:-:::::::*	130
Application	Mozilla Thunderbird cpe:2.3:a:mozilla:thunderbird:13.0:::::::* cpe:2.3:a:mozilla:thunderbird:12.0:::::::* cpe:2.3:a:mozilla:thunderbird:11.0:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:10.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:10.0:::::::* cpe:2.3:a:mozilla:thunderbird:9.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:9.0:::::::* cpe:2.3:a:mozilla:thunderbird:8.0:::::::* cpe:2.3:a:mozilla:thunderbird:7.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:7.0:::::::* cpe:2.3:a:mozilla:thunderbird:6.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:6.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:6.0:::::::* cpe:2.3:a:mozilla:thunderbird:5.0:::::::*	17
Application	Mozilla Thunderbird Esr cpe:2.3:a:mozilla:thunderbird_esr:10.0.5:::::::* cpe:2.3:a:mozilla:thunderbird_esr:10.0.4:::::::* cpe:2.3:a:mozilla:thunderbird_esr:10.0.3:::::::* cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:::::::* cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:::::::* cpe:2.3:a:mozilla:thunderbird_esr:10.0:::::::*	6

OpenVAS Exploits

Date	Description
2013-09-18	Name : Debian Security Advisory DSA 2513-1 (iceape - several vulnerabilities) File : nvt/deb_2513_1.nasl
2012-12-13	Name : SuSE Update for seamonkey openSUSE-SU-2012:0935-1 (seamonkey) File : nvt/gb_suse_2012_0935_1.nasl
2012-12-13	Name : SuSE Update for xulrunner openSUSE-SU-2012:0924-1 (xulrunner) File : nvt/gb_suse_2012_0924_1.nasl
2012-12-13	Name : SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 (MozillaThunderbird) File : nvt/gb_suse_2012_0917_1.nasl
2012-12-13	Name : SuSE Update for MozillaFirefox openSUSE-SU-2012:0899-1 (MozillaFirefox) File : nvt/gb_suse_2012_0899_1.nasl
2012-08-30	Name : Debian Security Advisory DSA 2528-1 (icedove) File : nvt/deb_2528_1.nasl
2012-08-10	Name : Debian Security Advisory DSA 2514-1 (iceweasel) File : nvt/deb_2514_1.nasl
2012-08-10	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox67.nasl
2012-08-03	Name : Mandriva Update for mozilla MDVSA-2012:110-1 (mozilla) File : nvt/gb_mandriva_MDVSA_2012_110_1.nasl
2012-07-30	Name : CentOS Update for firefox CESA-2012:1088 centos5 File : nvt/gb_CESA-2012_1088_firefox_centos5.nasl
2012-07-30	Name : CentOS Update for firefox CESA-2012:1088 centos6 File : nvt/gb_CESA-2012_1088_firefox_centos6.nasl
2012-07-30	Name : CentOS Update for thunderbird CESA-2012:1089 centos5 File : nvt/gb_CESA-2012_1089_thunderbird_centos5.nasl
2012-07-30	Name : CentOS Update for thunderbird CESA-2012:1089 centos6 File : nvt/gb_CESA-2012_1089_thunderbird_centos6.nasl
2012-07-26	Name : Mandriva Update for mozilla MDVSA-2012:110 (mozilla) File : nvt/gb_mandriva_MDVSA_2012_110.nasl
2012-07-23	Name : Mozilla Products Multiple Vulnerabilities - July12 (Windows) File : nvt/gb_mozilla_prdts_mult_vuln_jul12_win.nasl
2012-07-23	Name : Mozilla Products Multiple Vulnerabilities - July12 (Mac OS X) File : nvt/gb_mozilla_prdts_mult_vuln_jul12_macosx.nasl
2012-07-23	Name : Mozilla Firefox Multiple Vulnerabilities - July12 (Windows) File : nvt/gb_mozilla_firefox_mult_vuln_jul12_win.nasl
2012-07-23	Name : Mozilla Firefox Multiple Vulnerabilities - July12 (Mac OS X) File : nvt/gb_mozilla_firefox_mult_vuln_jul12_macosx.nasl
2012-07-19	Name : RedHat Update for thunderbird RHSA-2012:1089-01 File : nvt/gb_RHSA-2012_1089-01_thunderbird.nasl
2012-07-19	Name : Ubuntu Update for firefox USN-1509-1 File : nvt/gb_ubuntu_USN_1509_1.nasl
2012-07-19	Name : Ubuntu Update for ubufox USN-1509-2 File : nvt/gb_ubuntu_USN_1509_2.nasl
2012-07-19	Name : Ubuntu Update for thunderbird USN-1510-1 File : nvt/gb_ubuntu_USN_1510_1.nasl
2012-07-19	Name : RedHat Update for firefox RHSA-2012:1088-01 File : nvt/gb_RHSA-2012_1088-01_firefox.nasl

Nessus® Vulnerability Scanner

Date	Description
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_thunderbird_20130129.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-473.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-465.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-443.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-410.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-1088.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2012-1089.nasl - Type : ACT_GATHER_INFO
2013-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_firefox-201207-120719.nasl - Type : ACT_GATHER_INFO
2013-01-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-01.nasl - Type : ACT_GATHER_INFO
2012-09-06	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-110.nasl - Type : ACT_GATHER_INFO
2012-08-15	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2528.nasl - Type : ACT_GATHER_INFO
2012-08-03	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_dbf338d0dce511e1b65514dae9ebcf89.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120717_thunderbird_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120717_firefox_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-07-23	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_firefox-201207-8226.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_firefox_14_0.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_211.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Windows host contains a mail client that is potentially affected b... File : mozilla_thunderbird_140.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Windows host contains a mail client that is potentially affected b... File : mozilla_thunderbird_1006.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_140.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_1006.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Mac OS X host contains a mail client that is potentially affected ... File : macosx_thunderbird_14_0.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Mac OS X host contains a mail client that is potentially affected ... File : macosx_thunderbird_10_0_6.nasl - Type : ACT_GATHER_INFO
2012-07-19	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_firefox_10_0_6.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-1088.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-1088.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-1089.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1509-1.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1509-2.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1510-1.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2514.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2513.nasl - Type : ACT_GATHER_INFO
2012-07-18	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2012-1089.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:31:14	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	19
CPE ID(s)	188
Openvas Exploit(s)	23
Nessus® Exploit(s)	33

	Related
10	CVE-2012-1967
10	CVE-2012-1954
9.3	CVE-2012-1948
6.4	CVE-2012-1950
4.3	CVE-2012-1966
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 5 more Alert(s)

10 - DSA-2514

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU