{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"versions ant\u00e9rieures \u00e0 Thunderbird 14 ;","product":{"name":"Thunderbird","vendor":{"name":"Mozilla","scada":false}}},{"description":"versions ant\u00e9rieures \u00e0 Firefox ESR 10.0.6 ;","product":{"name":"Firefox","vendor":{"name":"Mozilla","scada":false}}},{"description":"Versions ant\u00e9rieures \u00e0 Firefox 14 ;","product":{"name":"Firefox","vendor":{"name":"Mozilla","scada":false}}},{"description":"versions ant\u00e9rieures \u00e0 Thunderbird ESR 10.0.6 ;","product":{"name":"Thunderbird","vendor":{"name":"Mozilla","scada":false}}},{"description":"versions ant\u00e9rieures \u00e0 SeaMonkey 2.11.","product":{"name":"N/A","vendor":{"name":"Mozilla","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2012-1963","url":"https://www.cve.org/CVERecord?id=CVE-2012-1963"},{"name":"CVE-2012-1966","url":"https://www.cve.org/CVERecord?id=CVE-2012-1966"},{"name":"CVE-2012-1949","url":"https://www.cve.org/CVERecord?id=CVE-2012-1949"},{"name":"CVE-2012-1953","url":"https://www.cve.org/CVERecord?id=CVE-2012-1953"},{"name":"CVE-2012-1951","url":"https://www.cve.org/CVERecord?id=CVE-2012-1951"},{"name":"CVE-2012-1958","url":"https://www.cve.org/CVERecord?id=CVE-2012-1958"},{"name":"CVE-2012-1950","url":"https://www.cve.org/CVERecord?id=CVE-2012-1950"},{"name":"CVE-2012-1954","url":"https://www.cve.org/CVERecord?id=CVE-2012-1954"},{"name":"CVE-2012-1967","url":"https://www.cve.org/CVERecord?id=CVE-2012-1967"},{"name":"CVE-2012-1957","url":"https://www.cve.org/CVERecord?id=CVE-2012-1957"},{"name":"CVE-2012-1952","url":"https://www.cve.org/CVERecord?id=CVE-2012-1952"},{"name":"CVE-2012-1960","url":"https://www.cve.org/CVERecord?id=CVE-2012-1960"},{"name":"CVE-2012-1948","url":"https://www.cve.org/CVERecord?id=CVE-2012-1948"},{"name":"CVE-2012-1965","url":"https://www.cve.org/CVERecord?id=CVE-2012-1965"},{"name":"CVE-2012-1962","url":"https://www.cve.org/CVERecord?id=CVE-2012-1962"},{"name":"CVE-2012-1959","url":"https://www.cve.org/CVERecord?id=CVE-2012-1959"},{"name":"CVE-2012-1955","url":"https://www.cve.org/CVERecord?id=CVE-2012-1955"},{"name":"CVE-2012-1961","url":"https://www.cve.org/CVERecord?id=CVE-2012-1961"}],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-47 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-47.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-48 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-48.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-55 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-55.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-53 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-53.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-43 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-43.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-56 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-56.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-42 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-42.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-49 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-49.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-52 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-52.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-46 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-46.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-51 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-51.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-45 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-45.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-50 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-50.html"},{"title":"Bulletin de s\u00e9curit\u00e9 de la fondation Mozilla mfsa2012-44 du    17 juillet 2012 :","url":"http://www.mozilla.org/security/announce/2012/mfsa2012-44.html"}],"reference":"CERTA-2012-AVI-394","revisions":[{"description":"version initiale.","revision_date":"2012-07-18T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"Quatorze vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits <span\nclass=\"textit\">Mozilla</span>. Elles permettent de falsifier des URL,\nlire de fa\u00e7on arbitraire des espaces m\u00e9moire, \u00e9crire de fa\u00e7on arbitraire\ndans des espaces m\u00e9moire, contourner des politiques de s\u00e9curit\u00e9 et\nex\u00e9cuter du code arbitraire \u00e0 distance.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox et Thunderbird","vendor_advisories":[{"published_at":null,"title":"Bulletins de s\u00e9curit\u00e9 Mozilla du 18 juillet 2012","url":null}]}