NVD

Id
45654  
Name
CVE-2012-4209  
Description
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-4209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229087 45654 CVE-2012-4209 SUSE-SU-2012:1592  View
229088 45654 CVE-2012-4209 openSUSE-SU-2013:0175  View
229089 45654 CVE-2012-4209 openSUSE-SU-2012:1583  View
229090 45654 CVE-2012-4209 openSUSE-SU-2012:1585  View
229091 45654 CVE-2012-4209 openSUSE-SU-2012:1586  View
229092 45654 CVE-2012-4209 oval:org.mitre.oval:def:16880  View
229093 45654 CVE-2012-4209 RHSA-2012:1482  View
229094 45654 CVE-2012-4209 RHSA-2012:1483  View
229095 45654 CVE-2012-4209 MDVSA-2012:173  View
229096 45654 CVE-2012-4209 http://www.mozilla.org/security/announce/2012/mfsa2012-103.html  View
229097 45654 CVE-2012-4209 56629  View
229098 45654 CVE-2012-4209 USN-1636-1  View
229099 45654 CVE-2012-4209 USN-1638-1  View
229100 45654 CVE-2012-4209 USN-1638-2  View
229101 45654 CVE-2012-4209 USN-1638-3  View
229102 45654 CVE-2012-4209 firefox-toplocation-xss(80181)  View
229103 45654 CVE-2012-4209 https://bugzilla.mozilla.org/show_bug.cgi?id=792405  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29751 JVNDB-2012-005458 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品には、location プロパティへアクセスするフレームの name 属性の "top" 値の使用を適切に制限しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4209 57447 CVE-2012-4209 45654 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005458.html 2012-11-20 2016-02-16 View