NVD

Id
43825  
Name
CVE-2012-1967  
Description
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-07-18  
Modified Date
2014-10-10  
Seq
2012-1967  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220213 43825 CVE-2012-1967 SUSE-SU-2012:0895  View
220214 43825 CVE-2012-1967 SUSE-SU-2012:0896  View
220215 43825 CVE-2012-1967 openSUSE-SU-2012:0899  View
220216 43825 CVE-2012-1967 openSUSE-SU-2012:0917  View
220217 43825 CVE-2012-1967 oval:org.mitre.oval:def:17025  View
220218 43825 CVE-2012-1967 RHSA-2012:1088  View
220219 43825 CVE-2012-1967 DSA-2514  View
220220 43825 CVE-2012-1967 DSA-2528  View
220221 43825 CVE-2012-1967 http://www.mozilla.org/security/announce/2012/mfsa2012-56.html  View
220222 43825 CVE-2012-1967 1027256  View
220223 43825 CVE-2012-1967 USN-1509-1  View
220224 43825 CVE-2012-1967 USN-1509-2  View
220225 43825 CVE-2012-1967 https://bugzilla.mozilla.org/show_bug.cgi?id=758344  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27430 JVNDB-2012-003137 複数の Mozilla 製品における任意の JavaScript コードを実行される脆弱性 複数の Mozilla 製品は、JavaScript サンドボックスユーティリティを適切に実装していないため、不適切な特権を持つ任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-1967 55205 CVE-2012-1967 43825 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003137.html 2012-07-17 2012-12-14 View