NVD

Id
45641  
Name
CVE-2012-4195  
Description
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-29  
Modified Date
2013-11-02  
Seq
2012-4195  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228943 45641 CVE-2012-4195 openSUSE-SU-2012:1412  View
228944 45641 CVE-2012-4195 SUSE-SU-2012:1426  View
228945 45641 CVE-2012-4195 oval:org.mitre.oval:def:16856  View
228946 45641 CVE-2012-4195 RHSA-2012:1407  View
228947 45641 CVE-2012-4195 RHSA-2012:1413  View
228948 45641 CVE-2012-4195 http://www.mozilla.org/security/announce/2012/mfsa2012-90.html  View
228949 45641 CVE-2012-4195 56302  View
228950 45641 CVE-2012-4195 USN-1620-1  View
228951 45641 CVE-2012-4195 USN-1620-2  View
228952 45641 CVE-2012-4195 https://bugzilla.mozilla.org/show_bug.cgi?id=793121  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29452 JVNDB-2012-005159 複数の Mozilla 製品の nsLocation::CheckURL 関数におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品の nsLocation::CheckURL 関数は、戻り値の呼び出し元のドキュメントおよびプリンシパルを適切に判断しないため、クロスサイトスクリプティング攻撃を実行される、および任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-4195 57433 CVE-2012-4195 45641 5.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005159.html 2012-10-26 2013-10-28 View