Mozilla Foundation Security Advisory 2012-96
Title: Memory corruption in str_unescape
Announced: November 20, 2012
Reporter: Scott Bell
Products: Firefox, Thunderbird, SeaMonkey
Fixed in: Firefox 17.0
Security researcher Scott Bell of Security-Assessment.com used the Address Sanitizer tool to discover a memory corruption in
In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.