Vulnerability CVE-2012-4206 - CERT Civis.Net

Vulnerability Name:

CVE-2012-4206 (CCN-80176)

Assigned:

2012-11-20

Published:

2012-11-20

Updated:

2017-09-19

Summary:

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
Per: http://cwe.mitre.org/data/definitions/426.html

'CWE-426: Untrusted Search Path'

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
5.1 Medium (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2012-4206

Source: SUSE
Type: UNKNOWN
SUSE-SU-2012:1592

Source: CCN
Type: SA51358
Mozilla Firefox / Thunderbird Multiple Vulnerabilities

Source: CCN
Type: SA51382
Mozilla Firefox / Thunderbird Multiple Vulnerabilities

Source: CCN
Type: MFSA 2012-98
Firefox installer DLL hijacking

Source: CONFIRM
Type: Vendor Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-98.html

Source: CCN
Type: OSVDB ID: 87590
Mozilla Firefox Installer Path Subversion Arbitrary DLL Injection Code Execution

Source: CCN
Type: BID-56625
Mozilla Firefox CVE-2012-4206 Arbitrary Code Execution Vulnerability

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.mozilla.org/show_bug.cgi?id=792106

Source: XF
Type: UNKNOWN
mozilla-firefox-dll-code-execution(80176)

Source: XF
Type: UNKNOWN
mozilla-firefox-dll-code-execution(80176)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:16991

Vulnerable Configuration:

Configuration 1:

cpe:/a:mozilla:firefox:0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.9:rc:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.10:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:1.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.10:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.11:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.12:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.13:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.14:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.5.15:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.12:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.13:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.14:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.15:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.16:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.17:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.18:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.19:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.20:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.21:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.22:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.23:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.24:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:3.6.25:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:5.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:6.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:7.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:8.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:9.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:10.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:11.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:12.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:12.0:beta6:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:13.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:13.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:14.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:14.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:15.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:15.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:16.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:16.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:* (Version <= 16.0.2)

AND

cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.3:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.4:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.5:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.6:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.7:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.8:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.9:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.10:*:*:*:*:*:*:*

AND

cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:mozilla:firefox:16.0:*:*:*:*:*:*:*

OR cpe:/a:mozilla:firefox_esr:10.0.10:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20124206	V	CVE-2012-4206	2022-05-20
oval:org.opensuse.security:def:32252	P	Security update for chrony (Moderate)	2021-12-22
oval:org.opensuse.security:def:33759	P	Security update for chrony (Moderate)	2021-12-22
oval:org.opensuse.security:def:29463	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:26175	P	Security update for xen (Moderate)	2021-12-01
oval:org.opensuse.security:def:57135	P	Security update for java-1_7_0-openjdk (Important)	2021-11-24
oval:org.opensuse.security:def:33045	P	Security update for postgresql96 (Important)	2021-11-22
oval:org.opensuse.security:def:26164	P	Security update for MozillaFirefox (Important)	2021-11-17
oval:org.opensuse.security:def:26163	P	Security update for bind (Important)	2021-11-11
oval:org.opensuse.security:def:33038	P	Security update for bind (Important)	2021-11-08
oval:org.opensuse.security:def:33034	P	Security update for opensc (Important)	2021-10-29
oval:org.opensuse.security:def:33033	P	Security update for python (Moderate)	2021-10-26
oval:org.opensuse.security:def:33015	P	Security update for atftp (Moderate)	2021-09-27
oval:org.opensuse.security:def:34547	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:33720	P	Security update for MozillaFirefox (Important)	2021-09-22
oval:org.opensuse.security:def:33713	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:32976	P	Security update for cpio (Important)	2021-08-14
oval:org.opensuse.security:def:32927	P	Security update for postgresql96 (Moderate)	2021-05-26
oval:org.opensuse.security:def:55181	P	Security update for cups (Important)	2021-04-30
oval:org.opensuse.security:def:54736	P	Security update for fwupdate (Important)	2021-04-09
oval:org.opensuse.security:def:55859	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:32264	P	Security update for perl-XML-Twig (Moderate)	2021-03-01
oval:org.opensuse.security:def:33082	P	Security update for freeradius-server (Low)	2021-02-22
oval:org.opensuse.security:def:32253	P	Security update for python (Important)	2021-02-11
oval:org.opensuse.security:def:33762	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:28933	P	Security update for the Linux Kernel (Important)	2021-02-11
oval:org.opensuse.security:def:34507	P	Security update for java-11-openjdk (Important)	2021-02-02
oval:org.opensuse.security:def:33656	P	Security update for dovecot22 (Important)	2021-01-04
oval:org.opensuse.security:def:29378	P	Security update for java-1_7_1-ibm (Moderate)	2021-01-04
oval:org.opensuse.security:def:55778	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP2) (Important)	2020-12-07
oval:org.opensuse.security:def:28678	P	Security update for MozillaFirefox, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:33801	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:28594	P	Security update for Perl	2020-12-01
oval:org.opensuse.security:def:30495	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:28537	P	Security update for compat-openssl097g	2020-12-01
oval:org.opensuse.security:def:30458	P	Security update for Mesa	2020-12-01
oval:org.opensuse.security:def:28452	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:29820	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:28321	P	Security update for pam (Moderate)	2020-12-01
oval:org.opensuse.security:def:33499	P	Security update for Mozilla	2020-12-01
oval:org.opensuse.security:def:29776	P	Security update for gnuplot (Moderate)	2020-12-01
oval:org.opensuse.security:def:28254	P	Security update for libxslt (Moderate)	2020-12-01
oval:org.opensuse.security:def:33411	P	Security update for salt (Moderate)	2020-12-01
oval:org.opensuse.security:def:29758	P	Security update for ghostscript-library (Moderate)	2020-12-01
oval:org.opensuse.security:def:28243	P	Security update for libxml2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:33354	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:29719	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:27612	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:28242	P	Security update for libwmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:33259	P	squidGuard on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29670	P	Security update for dhcp (Low)	2020-12-01
oval:org.opensuse.security:def:27577	P	vte-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33124	P	kdelibs4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29616	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:26939	P	libadns1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26895	P	findutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26881	P	dbus-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:57209	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:29321	P	Security update for sap_suse_cluster_connector	2020-12-01
oval:org.opensuse.security:def:26842	P	xen on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29235	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:26793	P	openswan on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29104	P	Security update for gstreamer-0_10-plugins-base (Important)	2020-12-01
oval:org.opensuse.security:def:26740	P	libarchive2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29035	P	Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:26589	P	libltdl7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55740	P	Security update for mozilla-nss (Moderate)	2020-12-01
oval:org.opensuse.security:def:29024	P	Security update for LibVNCServer (Critical)	2020-12-01
oval:org.opensuse.security:def:26505	P	Security update for phpMyAdmin (Moderate)	2020-12-01
oval:org.opensuse.security:def:55666	P	Security update for java-1_7_0-openjdk (Critical)	2020-12-01
oval:org.opensuse.security:def:28546	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:29023	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:26448	P	Security update for phpMyAdmin (Important)	2020-12-01
oval:org.opensuse.security:def:55574	P	Security update for MozillaFirefox, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:28511	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:26367	P	Security update for MozillaThunderbird (Moderate)	2020-12-01
oval:org.opensuse.security:def:55466	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:27873	P	Security update for quagga	2020-12-01
oval:org.opensuse.security:def:26239	P	Security update for gimp (Moderate)	2020-12-01
oval:org.opensuse.security:def:27829	P	Security update for libyaml	2020-12-01
oval:org.opensuse.security:def:55015	P	sudo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27815	P	Security update for libsndfile (Moderate)	2020-12-01
oval:org.opensuse.security:def:54909	P	libpng12-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27776	P	Security update for kdelibs4	2020-12-01
oval:org.opensuse.security:def:27727	P	Security update for fastjar	2020-12-01
oval:org.opensuse.security:def:54498	P	imobiledevice-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27674	P	Security update for subversion	2020-12-01
oval:org.opensuse.security:def:54358	P	pidgin-otr on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27523	P	ofed-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54336	P	mipv6d on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27439	P	libcurl-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29707	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:54335	P	mailx on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27382	P	cscope on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29671	P	Security update for dhcpcd	2020-12-01
oval:org.opensuse.security:def:27300	P	syslog-ng on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32870	P	glibc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29033	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:27172	P	libadns1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32714	P	libgtop on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28989	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:27108	P	dbus-1-glib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32627	P	PackageKit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28972	P	Recommended update for python-setuptools (Moderate)	2020-12-01
oval:org.opensuse.security:def:27097	P	compat-libldap-2_3-0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32570	P	libtiff3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27096	P	clamav on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32476	P	Security update for yast2-storage (Moderate)	2020-12-01
oval:org.opensuse.security:def:28884	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:33869	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:32341	P	Security update for spice (Moderate)	2020-12-01
oval:org.opensuse.security:def:28830	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:33825	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.mitre.oval:def:16991	V	Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.	2014-10-06
oval:org.opensuse.security:def:79843	P	Security update for Mozilla Firefox	2012-11-23