Multiple Mozilla products contain a flaw that may lead to an unauthorized information disclosure. The issue is triggered by an error in the DOMParser when it is used to parse text or HTML data. This will disclose potentially sensitive information to a remote attacker.

Upgrade Firefox and Thunderbird to version 15 or higher or SeaMonkey to version 2.12 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1027450 1027452
• CVE ID: 2012-3975 (see also: NVD)
• Secunia Advisory ID: 50088 50308 50331 50379 50380 50437 50460 50616 51766
• Bugtraq ID: 55311
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
  http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
  http://lists.opensuse.org/opensuse-updates/2012-08/msg00044.html
  http://www.gentoo.org/security/en/glsa/glsa-201301-01.xml
  http://www.palemoon.org/releasenotes-ng.shtml
  http://www.ubuntu.com/usn/usn-1548-1/
  http://www.ubuntu.com/usn/usn-1551-1/
  https://bugzilla.mozilla.org/show_bug.cgi?id=770684 [ Auth Req'd ]
• Vendor Specific Advisory URL: http://www.mozilla.org/security/announce/2012/mfsa2012-68.html

• vsemozhetbyt