PT-2012-5107 · Mozilla+1 · Firefox+1

Blake Kaplan + 1 · Published 2012-08-29 · Updated 2024-10-21 · CVE-2012-3979

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 15.0 on Android

Description The issue is related to the improper implementation of unspecified callers of the android log print function in Mozilla Firefox on Android. This allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Recommendations For Mozilla Firefox versions prior to 15.0 on Android, update to version 15.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2012-3979

Affected Products

Firefox

Suse

References · 6

• http://mozilla.org/security/announce/2012/mfsa2012-71.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3979 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html · Vendor Advisory
• http://securityfocus.com/bid/55344 · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=769265 · Note