NVD

Id
45652  
Name
CVE-2012-4207  
Description
The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in proximity to a chunk delimiter, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-4207  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229053 45652 CVE-2012-4207 SUSE-SU-2012:1592  View
229054 45652 CVE-2012-4207 openSUSE-SU-2013:0175  View
229055 45652 CVE-2012-4207 openSUSE-SU-2012:1583  View
229056 45652 CVE-2012-4207 openSUSE-SU-2012:1585  View
229057 45652 CVE-2012-4207 openSUSE-SU-2012:1586  View
229058 45652 CVE-2012-4207 oval:org.mitre.oval:def:16955  View
229059 45652 CVE-2012-4207 RHSA-2012:1482  View
229060 45652 CVE-2012-4207 RHSA-2012:1483  View
229061 45652 CVE-2012-4207 DSA-2583  View
229062 45652 CVE-2012-4207 DSA-2584  View
229063 45652 CVE-2012-4207 DSA-2588  View
229064 45652 CVE-2012-4207 MDVSA-2012:173  View
229065 45652 CVE-2012-4207 http://www.mozilla.org/security/announce/2012/mfsa2012-101.html  View
229066 45652 CVE-2012-4207 http://www.palemoon.org/releasenotes-ng.shtml  View
229067 45652 CVE-2012-4207 56632  View
229068 45652 CVE-2012-4207 USN-1636-1  View
229069 45652 CVE-2012-4207 USN-1638-1  View
229070 45652 CVE-2012-4207 USN-1638-2  View
229071 45652 CVE-2012-4207 USN-1638-3  View
229072 45652 CVE-2012-4207 firefox-hzgb2312-xss(80179)  View
229073 45652 CVE-2012-4207 https://bugzilla.mozilla.org/show_bug.cgi?id=801681  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29749 JVNDB-2012-005456 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品の HZ-GB-2312 文字セットの実装は、チャンクの区切り文字の近くにある ~ (チルダ) を適切に処理しないため、クロスサイトスクリプティング攻撃をされる脆弱性が存在します。 CVE-2012-4207 57445 CVE-2012-4207 45652 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005456.html 2012-11-20 2016-02-16 View