CVE:CVE-2012-3989
CNNVD:CNNVD-201210-154
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 16.0之前版本，Thunderbird 16.0之前版本，以及SeaMonkey 2.13之前版本中存在漏洞。该漏洞源于程序未正确地在对JavaScript对象使用实例操作符的同时转换未明变量。通过特制的网站，远程攻击者可利用该漏洞执行任意代码或导致拒绝服务（断言失败）。
solution:Upgrade mozilla firefox to a higher version than 16.0,and avoid the version (,16.0); Upgrade mozilla seamonkey to a higher version than 2.13,and avoid the version (,2.13); Upgrade mozilla thunderbird to a higher version than 16.0,and avoid the version (,16.0); Upgrade canonical ubuntu_linux to a higher version than 10.04,11.04,11.10,12.04,and avoid the version 10.04,11.04,11.10,12.04; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2