NVD

Id
45470  
Name
CVE-2012-3992  
Description
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-11-02  
Seq
2012-3992  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228365 45470 CVE-2012-3992 SUSE-SU-2012:1351  View
228366 45470 CVE-2012-3992 oval:org.mitre.oval:def:16987  View
228367 45470 CVE-2012-3992 RHSA-2012:1351  View
228368 45470 CVE-2012-3992 MDVSA-2012:163  View
228369 45470 CVE-2012-3992 http://www.mozilla.org/security/announce/2012/mfsa2012-84.html  View
228370 45470 CVE-2012-3992 56128  View
228371 45470 CVE-2012-3992 USN-1611-1  View
228372 45470 CVE-2012-3992 https://bugzilla.mozilla.org/show_bug.cgi?id=775009  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29200 JVNDB-2012-004907 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品は、履歴データを適切に管理しないため、クロスサイトスクリプティング攻撃を実行される、または重要な POST コンテンツを取得される脆弱性が存在します。 CVE-2012-3992 57230 CVE-2012-3992 45470 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004907.html 2012-10-09 2013-10-24 View