NVD

Id
45450  
Name
CVE-2012-3972  
Description
The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-29  
Modified Date
2013-11-02  
Seq
2012-3972  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228198 45450 CVE-2012-3972 openSUSE-SU-2012:1065  View
228199 45450 CVE-2012-3972 SUSE-SU-2012:1157  View
228200 45450 CVE-2012-3972 SUSE-SU-2012:1167  View
228201 45450 CVE-2012-3972 oval:org.mitre.oval:def:16234  View
228202 45450 CVE-2012-3972 RHSA-2012:1210  View
228203 45450 CVE-2012-3972 RHSA-2012:1211  View
228204 45450 CVE-2012-3972 DSA-2553  View
228205 45450 CVE-2012-3972 DSA-2554  View
228206 45450 CVE-2012-3972 DSA-2556  View
228207 45450 CVE-2012-3972 http://www.mozilla.org/security/announce/2012/mfsa2012-65.html  View
228208 45450 CVE-2012-3972 USN-1548-1  View
228209 45450 CVE-2012-3972 USN-1548-2  View
228210 45450 CVE-2012-3972 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
228211 45450 CVE-2012-3972 https://bugzilla.mozilla.org/show_bug.cgi?id=746855  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28252 JVNDB-2012-003959 複数の Mozilla 製品の XSLT の format-number の機能における重要な情報を取得される脆弱性 複数の Mozilla 製品の XSLT の format-number の機能には、重要な情報を取得される脆弱性が存在します。 CVE-2012-3972 57210 CVE-2012-3972 45450 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003959.html 2012-08-28 2013-06-11 View