NVD

Id
45630  
Name
CVE-2012-4184  
Description
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-11-02  
Seq
2012-4184  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228855 45630 CVE-2012-4184 SUSE-SU-2012:1351  View
228856 45630 CVE-2012-4184 oval:org.mitre.oval:def:16946  View
228857 45630 CVE-2012-4184 RHSA-2012:1351  View
228858 45630 CVE-2012-4184 MDVSA-2012:163  View
228859 45630 CVE-2012-4184 http://www.mozilla.org/security/announce/2012/mfsa2012-83.html  View
228860 45630 CVE-2012-4184 56120  View
228861 45630 CVE-2012-4184 USN-1611-1  View
228862 45630 CVE-2012-4184 firefox-cow-xss(79154)  View
228863 45630 CVE-2012-4184 https://bugzilla.mozilla.org/show_bug.cgi?id=780370  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29191 JVNDB-2012-004898 複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性 複数の Mozilla 製品の Chrome Object Wrapper (COW) の実装は、標準クラス用のプロトタイプのプロパティへのアクセスを制限しないため、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-4184 57422 CVE-2012-4184 45630 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004898.html 2012-10-09 2013-10-24 View