NVD

Id
45648  
Name
CVE-2012-4203  
Description
The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-4203  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229011 45648 CVE-2012-4203 SUSE-SU-2012:1592  View
229012 45648 CVE-2012-4203 openSUSE-SU-2013:0175  View
229013 45648 CVE-2012-4203 openSUSE-SU-2012:1583  View
229014 45648 CVE-2012-4203 openSUSE-SU-2012:1586  View
229015 45648 CVE-2012-4203 oval:org.mitre.oval:def:16503  View
229016 45648 CVE-2012-4203 http://www.mozilla.org/security/announce/2012/mfsa2012-95.html  View
229017 45648 CVE-2012-4203 56623  View
229018 45648 CVE-2012-4203 USN-1638-1  View
229019 45648 CVE-2012-4203 USN-1638-2  View
229020 45648 CVE-2012-4203 USN-1638-3  View
229021 45648 CVE-2012-4203 https://bugzilla.mozilla.org/show_bug.cgi?id=765628  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29745 JVNDB-2012-005452 Mozilla Firefox の新しいタブページにおける任意のプログラムを実行される脆弱性 Mozilla Firefox の新しいタブページは、ブックマークレットによる JavaScript コードの実行に特権コンテキストを使用するため、任意のプログラムを実行される脆弱性が存在します。 CVE-2012-4203 57441 CVE-2012-4203 45648 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005452.html 2012-11-20 2012-12-14 View