NVD

Id
45458  
Name
CVE-2012-3980  
Description
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-29  
Modified Date
2013-11-02  
Seq
2012-3980  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228268 45458 CVE-2012-3980 openSUSE-SU-2012:1065  View
228269 45458 CVE-2012-3980 SUSE-SU-2012:1157  View
228270 45458 CVE-2012-3980 SUSE-SU-2012:1167  View
228271 45458 CVE-2012-3980 oval:org.mitre.oval:def:17000  View
228272 45458 CVE-2012-3980 RHSA-2012:1210  View
228273 45458 CVE-2012-3980 RHSA-2012:1211  View
228274 45458 CVE-2012-3980 http://www.mozilla.org/security/announce/2012/mfsa2012-72.html  View
228275 45458 CVE-2012-3980 55257  View
228276 45458 CVE-2012-3980 USN-1548-1  View
228277 45458 CVE-2012-3980 USN-1548-2  View
228278 45458 CVE-2012-3980 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
228279 45458 CVE-2012-3980 https://bugzilla.mozilla.org/show_bug.cgi?id=771859  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28259 JVNDB-2012-003966 複数の Mozilla 製品の Web コンソールにおけるクローム特権で任意の JavaScript コードを実行される脆弱性 複数の Mozilla 製品の Web コンソールには、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-3980 57218 CVE-2012-3980 45458 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003966.html 2012-08-28 2013-06-11 View