CVE-2012-3975 in Firefox
Summary
The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.