NVD

Id
42546  
Name
CVE-2012-0451  
Description
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-03-14  
Modified Date
2012-12-18  
Seq
2012-0451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214328 42546 CVE-2012-0451 openSUSE-SU-2012:0417  View
214329 42546 CVE-2012-0451 oval:org.mitre.oval:def:14909  View
214330 42546 CVE-2012-0451 http://www.mozilla.org/security/announce/2012/mfsa2012-15.html  View
214331 42546 CVE-2012-0451 USN-1400-2  View
214332 42546 CVE-2012-0451 USN-1400-3  View
214333 42546 CVE-2012-0451 USN-1400-4  View
214334 42546 CVE-2012-0451 USN-1400-5  View
214335 42546 CVE-2012-0451 https://bugzilla.mozilla.org/show_bug.cgi?id=717511  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26072 JVNDB-2012-001779 複数の Mozilla 製品における CRLF インジェクションの脆弱性 複数の Mozilla 製品には、CRLF インジェクションの脆弱性が存在します。 CVE-2012-0451 53689 CVE-2012-0451 42546 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001779.html 2012-03-13 2012-08-24 View