NVD

Id
45653  
Name
CVE-2012-4208  
Description
The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does not consider the compartment during property filtering, which allows remote attackers to bypass intended chrome-only restrictions on reading DOM object properties via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-4208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229074 45653 CVE-2012-4208 SUSE-SU-2012:1592  View
229075 45653 CVE-2012-4208 openSUSE-SU-2013:0175  View
229076 45653 CVE-2012-4208 openSUSE-SU-2012:1583  View
229077 45653 CVE-2012-4208 openSUSE-SU-2012:1585  View
229078 45653 CVE-2012-4208 openSUSE-SU-2012:1586  View
229079 45653 CVE-2012-4208 oval:org.mitre.oval:def:16695  View
229080 45653 CVE-2012-4208 http://www.mozilla.org/security/announce/2012/mfsa2012-99.html  View
229081 45653 CVE-2012-4208 56627  View
229082 45653 CVE-2012-4208 USN-1636-1  View
229083 45653 CVE-2012-4208 USN-1638-1  View
229084 45653 CVE-2012-4208 USN-1638-2  View
229085 45653 CVE-2012-4208 USN-1638-3  View
229086 45653 CVE-2012-4208 https://bugzilla.mozilla.org/show_bug.cgi?id=798264  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29750 JVNDB-2012-005457 複数の Mozilla 製品の XrayWrapper の実装におけるクローム専用の制限を回避される脆弱性 複数の Mozilla 製品の XrayWrapper の実装は、プロパティのフィルタリングの間、コンパートメントを考慮しないため、DOM オブジェクトのプロパティの読み込みにおいてクローム専用 (chrome-only) の制限を回避される脆弱性が存在します。 CVE-2012-4208 57446 CVE-2012-4208 45653 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005457.html 2012-11-20 2012-12-14 View