# CVEs published 2012-06-05 26 CVEs were published on June 5, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-0441](https://cve.now/CVE-2012-0441.md): The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Fir (no CVSS) - [CVE-2012-1937](https://cve.now/CVE-2012-1937.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird (no CVSS) - [CVE-2012-1938](https://cve.now/CVE-2012-1938.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.1 (no CVSS) - [CVE-2012-1939](https://cve.now/CVE-2012-1939.md): jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which a (no CVSS) - [CVE-2012-1940](https://cve.now/CVE-2012-1940.md): Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Th (no CVSS) - [CVE-2012-1941](https://cve.now/CVE-2012-1941.md): Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x (no CVSS) - [CVE-2012-1942](https://cve.now/CVE-2012-1942.md): The Mozilla Updater and Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allow local users to (no CVSS) - [CVE-2012-1943](https://cve.now/CVE-2012-1943.md): Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2 (no CVSS) - [CVE-2012-1944](https://cve.now/CVE-2012-1944.md): The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 throug (no CVSS) - [CVE-2012-1945](https://cve.now/CVE-2012-1945.md): Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaM (no CVSS) - [CVE-2012-1946](https://cve.now/CVE-2012-1946.md): Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10. (no CVSS) - [CVE-2012-1947](https://cve.now/CVE-2012-1947.md): Heap-based buffer overflow in the utf16\_to\_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbi (no CVSS) - [CVE-2012-3105](https://cve.now/CVE-2012-3105.md): The glBufferData function in the WebGL implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 t (no CVSS) - [CVE-2012-0247](https://cve.now/CVE-2012-0247.md): ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code (no CVSS) - [CVE-2012-0248](https://cve.now/CVE-2012-0248.md): ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD (no CVSS) - [CVE-2012-0259](https://cve.now/CVE-2012-0259.md): The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) (no CVSS) - [CVE-2012-0260](https://cve.now/CVE-2012-0260.md): The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory (no CVSS) - [CVE-2012-0805](https://cve.now/CVE-2012-0805.md): Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL co (no CVSS, sqlalchemy) - [CVE-2012-0920](https://cve.now/CVE-2012-0920.md): Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled (no CVSS) - [CVE-2012-1185](https://cve.now/CVE-2012-1185.md): Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause (no CVSS) - [CVE-2012-1186](https://cve.now/CVE-2012-1186.md): Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial (no CVSS) - [CVE-2012-1610](https://cve.now/CVE-2012-1610.md): Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denia (no CVSS) - [CVE-2012-1798](https://cve.now/CVE-2012-1798.md): The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out- (no CVSS) - [CVE-2012-2094](https://cve.now/CVE-2012-2094.md): Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Das (no CVSS, horizon) - [CVE-2012-2144](https://cve.now/CVE-2012-2144.md): Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the s (no CVSS, horizon) - [CVE-2012-1667](https://cve.now/CVE-2012-1667.md): ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly h (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-06-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.