CVE:CVE-2012-1946
CNNVD:CNNVD-201206-050
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla Firefox 4.x至12.0版本，Firefox ESR 10.0.5之前的10.x版本，Thunderbird 5.0至12.0版本，Thunderbird ESR 10.0.5之前的10.x版本以及SeaMonkey 2.10之前版本的nsINode::ReplaceOrInsertBefore函数中存在释放后使用漏洞。远程攻击者可利用该漏洞借助文档更改包括更换或者插入节点执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,5.0.1,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,8.0.1,9.0,9.0.1,10.0,10.0.1,10.0.2,11.0,12.0,12.0:beta6,and avoid the version 4.0,4.0:beta1,4.0:beta10,4.0:beta11,4.0:beta12,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:beta8,4.0:beta9,4.0.1,5.0,5.0.1,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,8.0.1,9.0,9.0.1,10.0,10.0.1,10.0.2,11.0,12.0,12.0:beta6; Upgrade mozilla firefox_esr to a higher version than 10.0,10.0.1,10.0.2,10.0.3,10.0.4,and avoid the version 10.0,10.0.1,10.0.2,10.0.3,10.0.4; Upgrade mozilla seamonkey to a higher version than 2.9,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.1,2.1:alpha1,2.1:alpha2,2.1:alpha3,2.1:beta1,2.1:beta2,2.1:beta3,2.1:rc1,2.1:rc2,2.2,2.2:beta1,2.2:beta2,2.2:beta3,2.3,2.3:beta1,2.3:beta2,2.3:beta3,2.3.1,2.3.2,2.3.3,2.4,2.4:beta1,2.4:beta2,2.4:beta3,2.4.1,2.5,2.5:beta1,2.5:beta2,2.5:beta3,2.5:beta4,2.6,2.6:beta1,2.6:beta2,2.6:beta3,2.6:beta4,2.6.1,2.7,2.7:beta1,2.7:beta2,2.7:beta3,2.7:beta4,2.7:beta5,2.7.1,2.7.2,2.8,2.8:beta1,2.8:beta2,2.8:beta3,2.8:beta4,2.8:beta5,2.8:beta6,2.9:beta1,2.9:beta2,2.9:beta3,and avoid the version (,2.9],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.5.0.8,1.5.0.9,1.5.0.10,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.1,2.1:alpha1,2.1:alpha2,2.1:alpha3,2.1:beta1,2.1:beta2,2.1:beta3,2.1:rc1,2.1:rc2,2.2,2.2:beta1,2.2:beta2,2.2:beta3,2.3,2.3:beta1,2.3:beta2,2.3:beta3,2.3.1,2.3.2,2.3.3,2.4,2.4:beta1,2.4:beta2,2.4:beta3,2.4.1,2.5,2.5:beta1,2.5:beta2,2.5:beta3,2.5:beta4,2.6,2.6:beta1,2.6:beta2,2.6:beta3,2.6:beta4,2.6.1,2.7,2.7:beta1,2.7:beta2,2.7:beta3,2.7:beta4,2.7:beta5,2.7.1,2.7.2,2.8,2.8:beta1,2.8:beta2,2.8:beta3,2.8:beta4,2.8:beta5,2.8:beta6,2.9:beta1,2.9:beta2,2.9:beta3; Upgrade mozilla thunderbird to a higher version than 5.0,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,9.0,9.0.1,10.0,10.0.1,10.0.2,10.0.3,10.0.4,11.0,12.0,and avoid the version 5.0,6.0,6.0.1,6.0.2,7.0,7.0.1,8.0,9.0,9.0.1,10.0,10.0.1,10.0.2,10.0.3,10.0.4,11.0,12.0; Upgrade mozilla thunderbird_esr to a higher version than 10.0,10.0.1,10.0.2,10.0.3,10.0.4,and avoid the version 10.0,10.0.1,10.0.2,10.0.3,10.0.4