Rapid7 Vulnerability & Exploit Database

ELSA-2012-1407 Critical: Oracle Linux firefox security update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

ELSA-2012-1407 Critical: Oracle Linux firefox security update

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published

10/29/2012

Created

07/25/2018

Added

11/02/2012

Modified

08/17/2020

Description

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object.

Solution(s)

oracle-linux-upgrade-firefox
oracle-linux-upgrade-xulrunner
oracle-linux-upgrade-xulrunner-devel

References

https://attackerkb.com/topics/cve-2012-4194
56301
56302
56306
CVE - 2012-4194
CVE - 2012-4195
CVE - 2012-4196
OVAL16856
OVAL16918
OVAL16962
RHSA-2012:1407
RHSA-2012:1413
http://oss.oracle.com/pipermail/el-errata/2012-October/003099.html
http://oss.oracle.com/pipermail/el-errata/2012-October/003100.html

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;