CVE ID:	CVE-2012-1947
Description:	Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code via vectors that trigger a character-set conversion failure.
Test IDs:	1.3.6.1.4.1.25623.1.0.71466   1.3.6.1.4.1.25623.1.0.71541   1.3.6.1.4.1.25623.1.0.71393   1.3.6.1.4.1.25623.1.0.71392   1.3.6.1.4.1.25623.1.0.71468   1.3.6.1.4.1.25623.1.0.870748   1.3.6.1.4.1.25623.1.0.870749   1.3.6.1.4.1.25623.1.0.881112   1.3.6.1.4.1.25623.1.0.881218   1.3.6.1.4.1.25623.1.0.881109   1.3.6.1.4.1.25623.1.0.881200
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1947 Debian Security Information: DSA-2488 (Google Search) http://www.debian.org/security/2012/dsa-2488 Debian Security Information: DSA-2489 (Google Search) http://www.debian.org/security/2012/dsa-2489 http://www.mandriva.com/security/advisories?name=MDVSA-2012:088 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16911 RedHat Security Advisories: RHSA-2012:0710 http://rhn.redhat.com/errata/RHSA-2012-0710.html RedHat Security Advisories: RHSA-2012:0715 http://rhn.redhat.com/errata/RHSA-2012-0715.html SuSE Security Announcement: SUSE-SU-2012:0746 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html SuSE Security Announcement: openSUSE-SU-2012:0760 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html