CVE:CVE-2012-4210
CNNVD:CNNVD-201211-397
Firefox是一款非常流行的开源WEB浏览器。
Mozilla Firefox 17.0之前版本和Firefox ESR 10.0.11之前的10.x版本中的Style Inspector中存在漏洞，该漏洞源于没有正确限制HTML标记的上下文和Cascading Style Sheets (CSS)令牌序列。用户协助的远程攻击者利用该漏洞通过特制的样式表单，以chrom权限执行任意JavaScript代码。
solution:Upgrade mozilla firefox to a higher version than 16.0.2,0.1,0.2,0.3,0.4,0.5,0.6,0.6.1,0.7,0.7.1,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0:preview_release,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.4.1,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.0.12,3.0.13,3.0.14,3.0.15,3.0.16,3.0.17,3.5,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.5.6,3.5.7,3.5.8,3.5.9,3.5.10,3.5.11,3.5.12,3.5.13,3.5.14,3.5.15,3.6,3.6.2,3.6.3,3.6.4,3.6.6,3.6.7,3.6.8,3.6.9,3.6.10,3.6.11,3.6.12,3.6.13,3.6.14,3.6.15,3.6.16,3.6.17,3.6.18,3.6.19,3.6.20,3.6.21,3.6.22,3.6.23,3.6.24,3.6.25,4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,5.0.1,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,8.0.1,9.0,9.0.1,10.0,10.0.1,10.0.2,11.0,12.0,12.0:beta6,13.0,13.0.1,14.0,14.0.1,15.0,15.0.1,16.0,16.0.1,and avoid the version (,16.0.2],0.1,0.2,0.3,0.4,0.5,0.6,0.6.1,0.7,0.7.1,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0:preview_release,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.4.1,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.0.12,3.0.13,3.0.14,3.0.15,3.0.16,3.0.17,3.5,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.5.6,3.5.7,3.5.8,3.5.9,3.5.10,3.5.11,3.5.12,3.5.13,3.5.14,3.5.15,3.6,3.6.2,3.6.3,3.6.4,3.6.6,3.6.7,3.6.8,3.6.9,3.6.10,3.6.11,3.6.12,3.6.13,3.6.14,3.6.15,3.6.16,3.6.17,3.6.18,3.6.19,3.6.20,3.6.21,3.6.22,3.6.23,3.6.24,3.6.25,4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,5.0.1,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,8.0.1,9.0,9.0.1,10.0,10.0.1,10.0.2,11.0,12.0,12.0:beta6,13.0,13.0.1,14.0,14.0.1,15.0,15.0.1,16.0,16.0.1; Upgrade mozilla firefox_esr to a higher version than 10.0,10.0.1,10.0.2,10.0.3,10.0.4,10.0.5,10.0.6,10.0.7,10.0.8,10.0.9,10.0.10,and avoid the version 10.0,10.0.1,10.0.2,10.0.3,10.0.4,10.0.5,10.0.6,10.0.7,10.0.8,10.0.9,10.0.10