Novell Home

CVE-2012-0445

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2012-0445 at MITRE

Description

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.

NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

Novell Bugzilla entry: 744275

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SLE 11 SP1 DEBUGINFO
  • MozillaFirefox-debuginfo >= 10.0-0.3.2
  • MozillaFirefox-debugsource >= 10.0-0.3.2
  • beagle-debuginfo >= 0.3.8-56.44.45.6
  • beagle-debugsource >= 0.3.8-56.44.45.6
sle11-sp1-sdk.x86
sles11-sp1-vmware.x86-64
sled11-sp1.x86
sle11-sp1-sdk.s390x
sles11-sp1.ppc
sles11-sp1-vmware.x86
sles11-sp1.s390x
sled11-sp1.x86-64
sle11-sp1-sdk.x86-64
sled11-sp1.x86-64
sle11-sp1-sdk.ia64
sles11-sp1.ia64
sles11-sp1.x86
sles11-sp1.x86-64
SAT Patch Nr: 5754
SLE 11 SP1 DEBUGINFO
  • MozillaFirefox-debuginfo >= 10.0-0.3.2
  • MozillaFirefox-debugsource >= 10.0-0.3.2
sle11-sp1-sdk.x86
sles11-sp1-vmware.x86-64
sled11-sp1.x86
sle11-sp1-sdk.s390x
sles11-sp1.ppc
sles11-sp1-vmware.x86
sles11-sp1.s390x
sled11-sp1.x86-64
sle11-sp1-sdk.x86-64
sled11-sp1.x86-64
sle11-sp1-sdk.ia64
sles11-sp1.ia64
sles11-sp1.x86
sles11-sp1.x86-64
SAT Patch Nr: 5754
SUSE Linux Enterprise Software Development Kit 11 SP1
  • beagle >= 0.3.8-56.44.45.6
  • beagle-devel >= 0.3.8-56.44.45.6
  • beagle-lang >= 0.3.8-56.44.45.6
sle11-sp1-sdk.x86
sles11-sp1-vmware.x86-64
sled11-sp1.x86
sle11-sp1-sdk.s390x
sles11-sp1.ppc
sles11-sp1-vmware.x86
sles11-sp1.s390x
sled11-sp1.x86-64
sle11-sp1-sdk.x86-64
sled11-sp1.x86-64
sle11-sp1-sdk.ia64
sles11-sp1.ia64
sles11-sp1.x86
sles11-sp1.x86-64
SAT Patch Nr: 5754
SUSE Linux Enterprise Desktop 11 SP1
  • MozillaFirefox >= 10.0-0.3.2
  • MozillaFirefox-branding-SLED >= 7-0.6.7.7
  • MozillaFirefox-translations >= 10.0-0.3.2
  • beagle >= 0.3.8-56.44.45.6
  • beagle-evolution >= 0.3.8-56.44.45.6
  • beagle-firefox >= 0.3.8-56.44.45.6
  • beagle-gui >= 0.3.8-56.44.45.6
  • beagle-lang >= 0.3.8-56.44.45.6
  • flash-player >= 11.1.102.55-0.13.1
  • mhtml-firefox >= 0.5-1.45.7
  • mozilla-kde4-integration >= 0.6.3-5.6.5
sle11-sp1-sdk.x86
sles11-sp1-vmware.x86-64
sled11-sp1.x86
sle11-sp1-sdk.s390x
sles11-sp1.ppc
sles11-sp1-vmware.x86
sles11-sp1.s390x
sled11-sp1.x86-64
sle11-sp1-sdk.x86-64
sled11-sp1.x86-64
sle11-sp1-sdk.ia64
sles11-sp1.ia64
sles11-sp1.x86
sles11-sp1.x86-64
SAT Patch Nr: 5754
SUSE Linux Enterprise Server 11 SP1 for VMware
  • MozillaFirefox >= 10.0-0.3.2
  • MozillaFirefox-branding-SLES-for-VMware >= 7-0.4.2.5
  • MozillaFirefox-translations >= 10.0-0.3.2
  • mozilla-kde4-integration >= 0.6.3-5.6.5
sle11-sp1-sdk.x86
sles11-sp1-vmware.x86-64
sled11-sp1.x86
sle11-sp1-sdk.s390x
sles11-sp1.ppc
sles11-sp1-vmware.x86
sles11-sp1.s390x
sled11-sp1.x86-64
sle11-sp1-sdk.x86-64
sled11-sp1.x86-64
sle11-sp1-sdk.ia64
sles11-sp1.ia64
sles11-sp1.x86
sles11-sp1.x86-64
SAT Patch Nr: 5754
SUSE Linux Enterprise Server 11 SP1
  • MozillaFirefox >= 10.0-0.3.2
  • MozillaFirefox-branding-SLED >= 7-0.6.7.7
  • MozillaFirefox-translations >= 10.0-0.3.2
  • mozilla-kde4-integration >= 0.6.3-5.6.5
sle11-sp1-sdk.x86
sles11-sp1-vmware.x86-64
sled11-sp1.x86
sle11-sp1-sdk.s390x
sles11-sp1.ppc
sles11-sp1-vmware.x86
sles11-sp1.s390x
sled11-sp1.x86-64
sle11-sp1-sdk.x86-64
sled11-sp1.x86-64
sle11-sp1-sdk.ia64
sles11-sp1.ia64
sles11-sp1.x86
sles11-sp1.x86-64
SAT Patch Nr: 5754
openSUSE 11.4 DEBUGINFO
  • MozillaFirefox-debuginfo >= 10.0-0.2.1
  • MozillaFirefox-debugsource >= 10.0-0.2.1
openSUSE 11.4
  • MozillaFirefox >= 10.0-0.2.1
  • MozillaFirefox-branding-upstream >= 10.0-0.2.1
  • MozillaFirefox-buildsymbols >= 10.0-0.2.1
  • MozillaFirefox-devel >= 10.0-0.2.1
  • MozillaFirefox-translations-common >= 10.0-0.2.1
  • MozillaFirefox-translations-other >= 10.0-0.2.1

© 2014 Novell