NVD

Id
45464  
Name
CVE-2012-3986  
Description
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-11-02  
Seq
2012-3986  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228316 45464 CVE-2012-3986 SUSE-SU-2012:1351  View
228317 45464 CVE-2012-3986 oval:org.mitre.oval:def:16834  View
228318 45464 CVE-2012-3986 RHSA-2012:1351  View
228319 45464 CVE-2012-3986 DSA-2565  View
228320 45464 CVE-2012-3986 DSA-2569  View
228321 45464 CVE-2012-3986 DSA-2572  View
228322 45464 CVE-2012-3986 MDVSA-2012:163  View
228323 45464 CVE-2012-3986 http://www.mozilla.org/security/announce/2012/mfsa2012-77.html  View
228324 45464 CVE-2012-3986 55922  View
228325 45464 CVE-2012-3986 USN-1611-1  View
228326 45464 CVE-2012-3986 https://bugzilla.mozilla.org/show_bug.cgi?id=775868  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29184 JVNDB-2012-004891 複数の Mozilla 製品におけるアクセス制限を回避される脆弱性 複数の Mozilla 製品は、DOMWindowUtils メソッドの呼び出しを適切に制限しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2012-3986 57224 CVE-2012-3986 45464 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004891.html 2012-10-09 2013-10-24 View