NVD

Id
42553  
Name
CVE-2012-0458  
Description
Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-03-14  
Modified Date
2013-02-14  
Seq
2012-0458  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214379 42553 CVE-2012-0458 openSUSE-SU-2012:0417  View
214380 42553 CVE-2012-0458 oval:org.mitre.oval:def:15122  View
214381 42553 CVE-2012-0458 DSA-2433  View
214382 42553 CVE-2012-0458 http://www.mozilla.org/security/announce/2012/mfsa2012-16.html  View
214383 42553 CVE-2012-0458 USN-1400-2  View
214384 42553 CVE-2012-0458 USN-1400-3  View
214385 42553 CVE-2012-0458 USN-1400-4  View
214386 42553 CVE-2012-0458 USN-1400-5  View
214387 42553 CVE-2012-0458 USN-1401-1  View
214388 42553 CVE-2012-0458 https://bugzilla.mozilla.org/show_bug.cgi?id=718203  View
214389 42553 CVE-2012-0458 https://bugzilla.mozilla.org/show_bug.cgi?id=719994  View
214390 42553 CVE-2012-0458 https://bugzilla.mozilla.org/show_bug.cgi?id=723808  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26077 JVNDB-2012-001784 複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性 複数の Mozilla 製品は、URL をホームボタンへドラッグ＆ドロップすることによるホームページ設定を適切に制限しないため、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-0458 53696 CVE-2012-0458 42553 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001784.html 2012-03-13 2012-09-03 View