NVD

Id
45639  
Name
CVE-2012-4193  
Description
Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-10-12  
Modified Date
2013-11-02  
Seq
2012-4193  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228925 45639 CVE-2012-4193 SUSE-SU-2012:1351  View
228926 45639 CVE-2012-4193 oval:org.mitre.oval:def:16786  View
228927 45639 CVE-2012-4193 RHSA-2012:1361  View
228928 45639 CVE-2012-4193 RHSA-2012:1362  View
228929 45639 CVE-2012-4193 http://www.mozilla.org/security/announce/2012/mfsa2012-89.html  View
228930 45639 CVE-2012-4193 USN-1611-1  View
228931 45639 CVE-2012-4193 mozilla-location-security-bypass(79211)  View
228932 45639 CVE-2012-4193 https://bugzilla.mozilla.org/show_bug.cgi?id=720619  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29229 JVNDB-2012-004936 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 複数の Mozilla 製品には、セキュリティラッパーが解かれる際に、defaultValue 関数におけるセキュリティチェックが省略されるため、同一生成元ポリシー (Same Origin Policy) を回避される、および Location オブジェクトのプロパティを読まれる、または任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-4193 57431 CVE-2012-4193 45639 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004936.html 2012-10-11 2013-10-28 View