CVE:CVE-2012-3986
CNNVD:CNNVD-201210-151
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 16.0之前版本、Firefox ESR 10.0.8之前的10.x版本、Thunderbird 16.0之前版本、Thunderbird ESR 10.0.8之前的10.x版本、SeaMonkey 2.13之前版本中存在漏洞，该漏洞源于没有正确的限制调用DOMWindowUtils(又名nsDOMWindowUtils)方法。远程攻击者可利用该漏洞通过特制的JavaScript代码，绕过目地访问限制。
solution:Upgrade mozilla firefox_esr to a higher version than 10.0.8,and avoid the version (,10.0.8); Upgrade mozilla thunderbird_esr to a higher version than 10.0.8,and avoid the version (,10.0.8); Upgrade mozilla firefox to a higher version than 16.0,and avoid the version (,16.0); Upgrade mozilla thunderbird to a higher version than 16.0,and avoid the version (,16.0); Upgrade mozilla seamonkey to a higher version than 2.13,and avoid the version (,2.13); Upgrade canonical ubuntu_linux to a higher version than 10.04,11.04,11.10,12.04,and avoid the version 10.04,11.04,11.10,12.04; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.3,and avoid the version 6.3; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp3,and avoid the version 10:sp4,11:sp3; Upgrade suse linux_enterprise_sdk to a higher version than 10:sp4,and avoid the version 10:sp4; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp3,and avoid the version 10:sp4,11:sp3