CVE-2012-3975

Mozilla: DOMParser loads linked resources in extensions when parsing text/html (MFSA 2012-68)

Published Aug 29, 2012 CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Description
The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-3919 The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
Ubuntu USN Ubuntu USN USN-1548-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-1551-1 Thunderbird vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:21 PM
Reserved
Jul 11, 2012, 12:00 AM
Status
Modified
Published
Aug 29, 2012, 10:56 AM
Modified
Jun 16, 2026, 11:44 PM
Severity
Low
Public date
Aug 28, 2012, 12:00 AM