CVE-2012-3975

The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.

Date published : 2012-08-29

http://www.securityfocus.com/bid/55311

http://www.mozilla.org/security/announce/2012/mfsa2012-68.html