5   * MFSA 2012-59/CVE-2012-1956 (bmo#756719)

     6     Location object can be shadowed using Object.defineProperty

     7   * MFSA 2012-74/CVE-2012-3982

     8     Miscellaneous memory safety hazards

     9   * MFSA 2012-77/CVE-2012-3986 (bmo#775868)

    10     Some DOMWindowUtils methods bypass security checks

    11   * MFSA 2012-79/CVE-2012-3988 (bmo#725770)

    12     DOS and crash with full screen and history navigation

    13   * MFSA 2012-81/CVE-2012-3991 (bmo#783260)

    14     GetProperty function can bypass security checks

    15   * MFSA 2012-82/CVE-2012-3994 (bmo#765527)

    16     top object and location property accessible by plugins

    17   * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)

    18     Chrome Object Wrapper (COW) does not disallow acces to privileged

    19     functions or properties

    20   * MFSA 2012-84/CVE-2012-3992 (bmo#775009)

    21     Spoofing and script injection through location.hash

    22   * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/

    23     CVE-2012-4181/CVE-2012-4182/CVE-2012-4183

    24     Use-after-free, buffer overflow, and out of bounds read issues

    25     found using Address Sanitizer

    26   * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/

    27     CVE-2012-4188

    28     Heap memory corruption issues found using Address Sanitizer

    29   * MFSA 2012-87/CVE-2012-3990 (bmo#787704)

    30     Use-after-free in the IME State Manager