Package name
firefox
Date
2012-11-02
Advisory ID
MDVSA-2012:170
Affected versions
MES5 i586 , MES5 x86_64

Problem description

Multiple security issue were identified and fixed in mozilla firefox:

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10,
Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and
SeaMonkey before 2.13.2 do not prevent use of the valueOf method to
shadow the location object (aka window.location), which makes it
easier for remote attackers to conduct cross-site scripting (XSS)
attacks via vectors involving a plugin (CVE-2012-4194).

The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2,
Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird
ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly
determine the calling document and principal in its return value, which
makes it easier for remote attackers to conduct cross-site scripting
(XSS) attacks via a crafted web site, and makes it easier for remote
attackers to execute arbitrary JavaScript code by leveraging certain
add-on behavior (CVE-2012-4195).

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10,
Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10,
and SeaMonkey before 2.13.2 allow remote attackers to bypass the
Same Origin Policy and read the Location object via a prototype
property-injection attack that defeats certain protection mechanisms
for this object (CVE-2012-4196).

The mozilla firefox packages has been upgraded to the latest version
which is unaffected by these security flaws.

Updated packages

MES5 i586

 632ef1021ec2aa85c7fbe651b9f9d554  mes5/i586/firefox-10.0.10-0.2mdvmes5.2.i586.rpm
 88cb2b2348555655d3d4cf3b0845e9b9  mes5/i586/firefox-af-10.0.10-0.1mdvmes5.2.i586.rpm
 1c078d28fbb7149d9cf4854a1bc05fcc  mes5/i586/firefox-ar-10.0.10-0.1mdvmes5.2.i586.rpm
 54b7a7edec51a943b495d2b780c39afc  mes5/i586/firefox-be-10.0.10-0.1mdvmes5.2.i586.rpm
 e0a6b58c79746fffc5f2d4dcf291f1b7  mes5/i586/firefox-bg-10.0.10-0.1mdvmes5.2.i586.rpm
 174b0ffccf09c01c51a8a59d1c231391  mes5/i586/firefox-bn-10.0.10-0.1mdvmes5.2.i586.rpm
 63c6ab68820a7f005d898fe3b1877a1b  mes5/i586/firefox-ca-10.0.10-0.1mdvmes5.2.i586.rpm
 62edb6aade49ab0534e59f41eb2c51d3  mes5/i586/firefox-cs-10.0.10-0.1mdvmes5.2.i586.rpm
 be5bf300218089fdcc5d05cb4b09dda8  mes5/i586/firefox-cy-10.0.10-0.1mdvmes5.2.i586.rpm
 ea2414e7c121c6c0e51003d71b9779d2  mes5/i586/firefox-da-10.0.10-0.1mdvmes5.2.i586.rpm
 1f160f2837c7845d78fa18ce3865715b  mes5/i586/firefox-de-10.0.10-0.1mdvmes5.2.i586.rpm
 e80f1d498889b6915c42d4c0b20d134a  mes5/i586/firefox-devel-10.0.10-0.2mdvmes5.2.i586.rpm
 46beb4d7d9909fe4501479a07d78ad4b  mes5/i586/firefox-el-10.0.10-0.1mdvmes5.2.i586.rpm
 4fc1c06782677473ea9f580187244282  mes5/i586/firefox-en_GB-10.0.10-0.1mdvmes5.2.i586.rpm
 085205d8566c267063d655a7ac16496a  mes5/i586/firefox-eo-10.0.10-0.1mdvmes5.2.i586.rpm
 45c25d3592055323b50df0f7fa80fba3  mes5/i586/firefox-es_AR-10.0.10-0.1mdvmes5.2.i586.rpm
 e39fd5bde9d90e62270d5c60ec389ddd  mes5/i586/firefox-es_ES-10.0.10-0.1mdvmes5.2.i586.rpm
 c1faff590a340cbaab15fcf7eec208f4  mes5/i586/firefox-et-10.0.10-0.1mdvmes5.2.i586.rpm
 953565b509e84f4d5b54f1e2c984e7e7  mes5/i586/firefox-eu-10.0.10-0.1mdvmes5.2.i586.rpm
 16d281cb9b8811a66e92346da4d57983  mes5/i586/firefox-fi-10.0.10-0.1mdvmes5.2.i586.rpm
 eec932e0186f5d86fefa2bee0ee9503f  mes5/i586/firefox-fr-10.0.10-0.1mdvmes5.2.i586.rpm
 b16c0fb82f1eb813e00b5d5c5c0d0cbb  mes5/i586/firefox-fy-10.0.10-0.1mdvmes5.2.i586.rpm
 422a468d51b1ebbcb791846819f538cf  mes5/i586/firefox-ga_IE-10.0.10-0.1mdvmes5.2.i586.rpm
 3e23bfcf3e6ff4647f6991473e4ad999  mes5/i586/firefox-gl-10.0.10-0.1mdvmes5.2.i586.rpm
 a812b48f6aab7ff5ecd7dcd651b7e137  mes5/i586/firefox-gu_IN-10.0.10-0.1mdvmes5.2.i586.rpm
 8a111c3e5d7c2c436f39993678fa4b7f  mes5/i586/firefox-he-10.0.10-0.1mdvmes5.2.i586.rpm
 a4d854941a925e9618917c507065f593  mes5/i586/firefox-hi-10.0.10-0.1mdvmes5.2.i586.rpm
 a82f76f39590dc3f5738614707622306  mes5/i586/firefox-hu-10.0.10-0.1mdvmes5.2.i586.rpm
 b4dfe8e6e79b681ba69266d3150e0f49  mes5/i586/firefox-id-10.0.10-0.1mdvmes5.2.i586.rpm
 465a7a35bcab8014f4693ca17c55307b  mes5/i586/firefox-is-10.0.10-0.1mdvmes5.2.i586.rpm
 fdc7ea6ee02cf626019b5d630167ce7a  mes5/i586/firefox-it-10.0.10-0.1mdvmes5.2.i586.rpm
 cf188599655659a71d4bdee6e511cb70  mes5/i586/firefox-ja-10.0.10-0.1mdvmes5.2.i586.rpm
 fedd41103c2441c8dbf69c6496afa819  mes5/i586/firefox-ka-10.0.10-0.1mdvmes5.2.i586.rpm
 68ae75ff8f3107249ef6b6686ca79ba6  mes5/i586/firefox-kn-10.0.10-0.1mdvmes5.2.i586.rpm
 8b5b4be2422160f468856d210f31a838  mes5/i586/firefox-ko-10.0.10-0.1mdvmes5.2.i586.rpm
 96692da56f8c28434a47d11d71163843  mes5/i586/firefox-ku-10.0.10-0.1mdvmes5.2.i586.rpm
 c6386c2a25ba2565734d9cadb9d372e1  mes5/i586/firefox-lt-10.0.10-0.1mdvmes5.2.i586.rpm
 d84645b74cc10a50a2c3e62d05140777  mes5/i586/firefox-lv-10.0.10-0.1mdvmes5.2.i586.rpm
 52e22a5005969d364f23a5c04f2376ad  mes5/i586/firefox-mk-10.0.10-0.1mdvmes5.2.i586.rpm
 dee2253e817a2c55dbd2f38f687ce656  mes5/i586/firefox-mr-10.0.10-0.1mdvmes5.2.i586.rpm
 7f594e94e0d28bae828a9add1e0d99ce  mes5/i586/firefox-nb_NO-10.0.10-0.1mdvmes5.2.i586.rpm
 f8a695ba22b5b2c3b2644d96c259f1fd  mes5/i586/firefox-nl-10.0.10-0.1mdvmes5.2.i586.rpm
 8a1bfb49bd4325a8610f719a73d3a6b1  mes5/i586/firefox-nn_NO-10.0.10-0.1mdvmes5.2.i586.rpm
 da0aa6416a3cbc203c9957014e45d76b  mes5/i586/firefox-oc-10.0.10-0.1mdvmes5.2.i586.rpm
 0594a0f3fba19355125a0258db213f43  mes5/i586/firefox-pa_IN-10.0.10-0.1mdvmes5.2.i586.rpm
 57dd6367617849788184bea2cd614347  mes5/i586/firefox-pl-10.0.10-0.1mdvmes5.2.i586.rpm
 d40fbb80ca4f4a528ab10af69383982f  mes5/i586/firefox-pt_BR-10.0.10-0.1mdvmes5.2.i586.rpm
 c4fcabe59506957d16aa18fbe912b547  mes5/i586/firefox-pt_PT-10.0.10-0.1mdvmes5.2.i586.rpm
 94d5bcbc001b828f1c936b1006cf5efc  mes5/i586/firefox-ro-10.0.10-0.1mdvmes5.2.i586.rpm
 b1777fd35f9b71fd2e1608ec346f2af6  mes5/i586/firefox-ru-10.0.10-0.1mdvmes5.2.i586.rpm
 3d773dba1a89e10482bb573698db36ab  mes5/i586/firefox-si-10.0.10-0.1mdvmes5.2.i586.rpm
 8d6816540d03a9085ed605acc83bc375  mes5/i586/firefox-sk-10.0.10-0.1mdvmes5.2.i586.rpm
 00df1e91f0dadaff1bc5e73dfe4d8a52  mes5/i586/firefox-sl-10.0.10-0.1mdvmes5.2.i586.rpm
 cf15532a7b490d945a9ea85c9a7fd572  mes5/i586/firefox-sq-10.0.10-0.1mdvmes5.2.i586.rpm
 471ad80a27017b648b22384916a4aede  mes5/i586/firefox-sr-10.0.10-0.1mdvmes5.2.i586.rpm
 76b1c4ac581e3c2bfe83c19c3c82b1b6  mes5/i586/firefox-sv_SE-10.0.10-0.1mdvmes5.2.i586.rpm
 0678388c3d3cae440ea59b889c776330  mes5/i586/firefox-te-10.0.10-0.1mdvmes5.2.i586.rpm
 d489491ab277c629d78a175e39cdcb92  mes5/i586/firefox-th-10.0.10-0.1mdvmes5.2.i586.rpm
 7a89baa1f0c4314cbc773aa84191dc99  mes5/i586/firefox-tr-10.0.10-0.1mdvmes5.2.i586.rpm
 2578cb3288e25ea1b3f65435b42c7b5d  mes5/i586/firefox-uk-10.0.10-0.1mdvmes5.2.i586.rpm
 53bd168b70c72e2b7d6bcdbfcf5273fe  mes5/i586/firefox-zh_CN-10.0.10-0.1mdvmes5.2.i586.rpm
 4bca6331ab84f6818576e7e705bd25ff  mes5/i586/firefox-zh_TW-10.0.10-0.1mdvmes5.2.i586.rpm
 9a1661360fb5e4d9bddb2c54f739c1d2  mes5/i586/icedtea-web-1.1.6-0.4mdvmes5.2.i586.rpm
 52cfad6e2e787b644617bdfdd7a15c3a  mes5/i586/icedtea-web-javadoc-1.1.6-0.4mdvmes5.2.i586.rpm
 a163a26378cc1acb4681fdd6c47d284e  mes5/i586/libxulrunner10.0.10-10.0.10-0.2mdvmes5.2.i586.rpm
 cea6d2a5eec2c81ebaef71ebbb7e4f7c  mes5/i586/libxulrunner-devel-10.0.10-0.2mdvmes5.2.i586.rpm
 28a3fb3aa9c29cbda2e9a4e92745a96c  mes5/i586/xulrunner-10.0.10-0.2mdvmes5.2.i586.rpm 
 dc1b1bc016254ca84db8be5c5ef33938  mes5/SRPMS/firefox-10.0.10-0.2mdvmes5.2.src.rpm
 8aec0b086f93841c97c45f258594b6f9  mes5/SRPMS/firefox-l10n-10.0.10-0.1mdvmes5.2.src.rpm
 8f916230792fb7773287318ac630bac6  mes5/SRPMS/icedtea-web-1.1.6-0.4mdvmes5.2.src.rpm
 89000e6eb6a6b8a4d46fb960dc9fcd94  mes5/SRPMS/xulrunner-10.0.10-0.2mdvmes5.2.src.rpm

MES5 x86_64

 8107fceb7f1e972ee399fcf6e1fe7fdb  mes5/x86_64/firefox-10.0.10-0.2mdvmes5.2.x86_64.rpm
 6300933c3e35de347e19bfd81260c390  mes5/x86_64/firefox-af-10.0.10-0.1mdvmes5.2.x86_64.rpm
 8b4cbe7b2486b616ed36ab3f4a16b0da  mes5/x86_64/firefox-ar-10.0.10-0.1mdvmes5.2.x86_64.rpm
 c466bc5a2cde499d542c4762bf0fffc0  mes5/x86_64/firefox-be-10.0.10-0.1mdvmes5.2.x86_64.rpm
 fc31dc690b324c837e55b290941d49a5  mes5/x86_64/firefox-bg-10.0.10-0.1mdvmes5.2.x86_64.rpm
 30ed460b1587efee7bb36c6f44338c85  mes5/x86_64/firefox-bn-10.0.10-0.1mdvmes5.2.x86_64.rpm
 ceacff3501a82f4f43b5be5d6124c325  mes5/x86_64/firefox-ca-10.0.10-0.1mdvmes5.2.x86_64.rpm
 205dbfd79b646cf1b588d78c2ddc55f5  mes5/x86_64/firefox-cs-10.0.10-0.1mdvmes5.2.x86_64.rpm
 832afdfb4d10dc124cf388b47c6b5594  mes5/x86_64/firefox-cy-10.0.10-0.1mdvmes5.2.x86_64.rpm
 7ef7cd8817e8e951827a1c49858f2e2a  mes5/x86_64/firefox-da-10.0.10-0.1mdvmes5.2.x86_64.rpm
 baa7260ddf3986aa872809a9cbde2120  mes5/x86_64/firefox-de-10.0.10-0.1mdvmes5.2.x86_64.rpm
 6a7d9aaf2d79e0152748abc2945d2a7a  mes5/x86_64/firefox-devel-10.0.10-0.2mdvmes5.2.x86_64.rpm
 b8b87ad56ce86f29f9ca537631deaec3  mes5/x86_64/firefox-el-10.0.10-0.1mdvmes5.2.x86_64.rpm
 60c37a5646ab71997000b07105a70d7a  mes5/x86_64/firefox-en_GB-10.0.10-0.1mdvmes5.2.x86_64.rpm
 426e9d281407bbc3339b8386b4e7f2a7  mes5/x86_64/firefox-eo-10.0.10-0.1mdvmes5.2.x86_64.rpm
 142d32b893cfe34fbc2e5b3aff5f2d91  mes5/x86_64/firefox-es_AR-10.0.10-0.1mdvmes5.2.x86_64.rpm
 9aa2a879fd4ee3e15eaae0fe290dce3c  mes5/x86_64/firefox-es_ES-10.0.10-0.1mdvmes5.2.x86_64.rpm
 b6a6e44e85b74271cd7d6cfe8b05bdd9  mes5/x86_64/firefox-et-10.0.10-0.1mdvmes5.2.x86_64.rpm
 da5e75ca590d6acbafd6fda5a8cf4844  mes5/x86_64/firefox-eu-10.0.10-0.1mdvmes5.2.x86_64.rpm
 d71bac155a91097d0ad6d90e991a1934  mes5/x86_64/firefox-fi-10.0.10-0.1mdvmes5.2.x86_64.rpm
 00b1f7eca5712c4e3581cdf4236ff7cb  mes5/x86_64/firefox-fr-10.0.10-0.1mdvmes5.2.x86_64.rpm
 2ad571c98761e5028dcccc1ca0cd8394  mes5/x86_64/firefox-fy-10.0.10-0.1mdvmes5.2.x86_64.rpm
 7dd9e5b818831781877eb2ff5683670e  mes5/x86_64/firefox-ga_IE-10.0.10-0.1mdvmes5.2.x86_64.rpm
 72c65a6b3d0f83459d76ec5bd42f282e  mes5/x86_64/firefox-gl-10.0.10-0.1mdvmes5.2.x86_64.rpm
 5656b0a0487e5065a99c2ec25aab36a8  mes5/x86_64/firefox-gu_IN-10.0.10-0.1mdvmes5.2.x86_64.rpm
 3b63bd092fe2bd3a24a6d82519b6512f  mes5/x86_64/firefox-he-10.0.10-0.1mdvmes5.2.x86_64.rpm
 370015cec0695d31bdeec87144ecabf8  mes5/x86_64/firefox-hi-10.0.10-0.1mdvmes5.2.x86_64.rpm
 7784de043631093d29062d2e26ad43c3  mes5/x86_64/firefox-hu-10.0.10-0.1mdvmes5.2.x86_64.rpm
 99bb6a391867277c1315619379fb8cc2  mes5/x86_64/firefox-id-10.0.10-0.1mdvmes5.2.x86_64.rpm
 5620f7808476ee8f207f16c3e734a20a  mes5/x86_64/firefox-is-10.0.10-0.1mdvmes5.2.x86_64.rpm
 13d8c08db089bc62e116c5964b1511a4  mes5/x86_64/firefox-it-10.0.10-0.1mdvmes5.2.x86_64.rpm
 319f5526d265e488ce685765435958b2  mes5/x86_64/firefox-ja-10.0.10-0.1mdvmes5.2.x86_64.rpm
 ec9fbe84e7fcff37d3f16edbdf42b2a9  mes5/x86_64/firefox-ka-10.0.10-0.1mdvmes5.2.x86_64.rpm
 bcfde8bea7720c46d87477f8ab8013a8  mes5/x86_64/firefox-kn-10.0.10-0.1mdvmes5.2.x86_64.rpm
 0617a1c5a48fb1abf8a2af42f3f8fb66  mes5/x86_64/firefox-ko-10.0.10-0.1mdvmes5.2.x86_64.rpm
 a648a88d0a0042c2e7bf9788c7102e0a  mes5/x86_64/firefox-ku-10.0.10-0.1mdvmes5.2.x86_64.rpm
 22cd4667db638c863e7704412545c51b  mes5/x86_64/firefox-lt-10.0.10-0.1mdvmes5.2.x86_64.rpm
 a18a45828bdff3dc4d7425082668f6eb  mes5/x86_64/firefox-lv-10.0.10-0.1mdvmes5.2.x86_64.rpm
 ed97d13756627cd47669d115454d2adf  mes5/x86_64/firefox-mk-10.0.10-0.1mdvmes5.2.x86_64.rpm
 b3cc62f76257ade9ac8998c9b0286c8a  mes5/x86_64/firefox-mr-10.0.10-0.1mdvmes5.2.x86_64.rpm
 b8c8901f9118161eac8cc634731a7073  mes5/x86_64/firefox-nb_NO-10.0.10-0.1mdvmes5.2.x86_64.rpm
 cfa266bcd959b8dc9fd2934b42418015  mes5/x86_64/firefox-nl-10.0.10-0.1mdvmes5.2.x86_64.rpm
 1e83f3b6dad769c660728f49fa6fc17f  mes5/x86_64/firefox-nn_NO-10.0.10-0.1mdvmes5.2.x86_64.rpm
 3c6edbbc4db5e190c36918afcd03c274  mes5/x86_64/firefox-oc-10.0.10-0.1mdvmes5.2.x86_64.rpm
 da8711edf7f6ac046f36bc2acc4885c3  mes5/x86_64/firefox-pa_IN-10.0.10-0.1mdvmes5.2.x86_64.rpm
 bcfafcabaa2ba0f04369e47d04e91578  mes5/x86_64/firefox-pl-10.0.10-0.1mdvmes5.2.x86_64.rpm
 8e0f89875c3111f735989b779de8900a  mes5/x86_64/firefox-pt_BR-10.0.10-0.1mdvmes5.2.x86_64.rpm
 547f7e0291d905b96ca37cb6c3b73161  mes5/x86_64/firefox-pt_PT-10.0.10-0.1mdvmes5.2.x86_64.rpm
 e7161e7b9e36899abe1816abde55d4af  mes5/x86_64/firefox-ro-10.0.10-0.1mdvmes5.2.x86_64.rpm
 0e559cf9ece891f062d7d3b73dfc6d24  mes5/x86_64/firefox-ru-10.0.10-0.1mdvmes5.2.x86_64.rpm
 7604d6ccb72ec145bb625e9a402ffb86  mes5/x86_64/firefox-si-10.0.10-0.1mdvmes5.2.x86_64.rpm
 b9e1c22b358fbd6f0777753e697fd338  mes5/x86_64/firefox-sk-10.0.10-0.1mdvmes5.2.x86_64.rpm
 90c9166f137cb4299c10e11d381a9d8e  mes5/x86_64/firefox-sl-10.0.10-0.1mdvmes5.2.x86_64.rpm
 a117f8c8b0312dbd561a7f65874a3e5e  mes5/x86_64/firefox-sq-10.0.10-0.1mdvmes5.2.x86_64.rpm
 f26cbf3a78c1018cd620ae5bd7c2e574  mes5/x86_64/firefox-sr-10.0.10-0.1mdvmes5.2.x86_64.rpm
 96d9e84f73cbab5ba9c266970db8eaaf  mes5/x86_64/firefox-sv_SE-10.0.10-0.1mdvmes5.2.x86_64.rpm
 fe1d2fc4df882e10da50f91e6fda75fb  mes5/x86_64/firefox-te-10.0.10-0.1mdvmes5.2.x86_64.rpm
 d32317ed624bd555d8df623b3e167048  mes5/x86_64/firefox-th-10.0.10-0.1mdvmes5.2.x86_64.rpm
 348ff1e661e1cae970ebdee12d67a79c  mes5/x86_64/firefox-tr-10.0.10-0.1mdvmes5.2.x86_64.rpm
 e2021da252cb7df732f7b386044e33c3  mes5/x86_64/firefox-uk-10.0.10-0.1mdvmes5.2.x86_64.rpm
 7757ca4ca337481461b0679bff0fce20  mes5/x86_64/firefox-zh_CN-10.0.10-0.1mdvmes5.2.x86_64.rpm
 b8f24e9eba66f1509ece87d58446b1df  mes5/x86_64/firefox-zh_TW-10.0.10-0.1mdvmes5.2.x86_64.rpm
 7fcab7d0398a306c22870512aa55e9b6  mes5/x86_64/icedtea-web-1.1.6-0.4mdvmes5.2.x86_64.rpm
 12c96c212bc0f6bb8df6298dc42b5abf  mes5/x86_64/icedtea-web-javadoc-1.1.6-0.4mdvmes5.2.x86_64.rpm
 41404dbed35c645ba21a3f59777c099f  mes5/x86_64/lib64xulrunner10.0.10-10.0.10-0.2mdvmes5.2.x86_64.rpm
 5653d4fe76c567e45d03db6d10c43ff6  mes5/x86_64/lib64xulrunner-devel-10.0.10-0.2mdvmes5.2.x86_64.rpm
 8bbd9e74f9230084b8ea9628f4906e41  mes5/x86_64/xulrunner-10.0.10-0.2mdvmes5.2.x86_64.rpm 
 dc1b1bc016254ca84db8be5c5ef33938  mes5/SRPMS/firefox-10.0.10-0.2mdvmes5.2.src.rpm
 8aec0b086f93841c97c45f258594b6f9  mes5/SRPMS/firefox-l10n-10.0.10-0.1mdvmes5.2.src.rpm
 8f916230792fb7773287318ac630bac6  mes5/SRPMS/icedtea-web-1.1.6-0.4mdvmes5.2.src.rpm
 89000e6eb6a6b8a4d46fb960dc9fcd94  mes5/SRPMS/xulrunner-10.0.10-0.2mdvmes5.2.src.rpm

References