NVD

Id
42541  
Name
CVE-2012-0446  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-02-01  
Modified Date
2013-11-15  
Seq
2012-0446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214293 42541 CVE-2012-0446 openSUSE-SU-2012:0234  View
214294 42541 CVE-2012-0446 oval:org.mitre.oval:def:14304  View
214295 42541 CVE-2012-0446 MDVSA-2012:013  View
214296 42541 CVE-2012-0446 http://www.mozilla.org/security/announce/2012/mfsa2012-05.html  View
214297 42541 CVE-2012-0446 51752  View
214298 42541 CVE-2012-0446 mozilla-xpconnect-xss(72837)  View
214299 42541 CVE-2012-0446 https://bugzilla.mozilla.org/show_bug.cgi?id=705651  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25564 JVNDB-2012-001271 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品には、信頼されていないオブジェクトを呼び出すフレームスクリプトに対する XPConnect セキュリティ制限に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0446 53684 CVE-2012-0446 42541 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001271.html 2012-01-31 2012-08-09 View