NVD

Id
45655  
Name
CVE-2012-4210  
Description
The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-4210  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229104 45655 CVE-2012-4210 SUSE-SU-2012:1592  View
229105 45655 CVE-2012-4210 openSUSE-SU-2013:0175  View
229106 45655 CVE-2012-4210 openSUSE-SU-2012:1583  View
229107 45655 CVE-2012-4210 openSUSE-SU-2012:1586  View
229108 45655 CVE-2012-4210 oval:org.mitre.oval:def:16833  View
229109 45655 CVE-2012-4210 RHSA-2012:1482  View
229110 45655 CVE-2012-4210 MDVSA-2012:173  View
229111 45655 CVE-2012-4210 http://www.mozilla.org/security/announce/2012/mfsa2012-104.html  View
229112 45655 CVE-2012-4210 http://www.palemoon.org/releasenotes-ng.shtml  View
229113 45655 CVE-2012-4210 56646  View
229114 45655 CVE-2012-4210 USN-1638-1  View
229115 45655 CVE-2012-4210 USN-1638-2  View
229116 45655 CVE-2012-4210 USN-1638-3  View
229117 45655 CVE-2012-4210 firefox-style-inspector-priv-esc(80182)  View
229118 45655 CVE-2012-4210 https://bugzilla.mozilla.org/show_bug.cgi?id=796866  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29752 JVNDB-2012-005459 Mozilla Firefox および Firefox ESR におけるクローム特権で任意の JavaScript を実行される脆弱性 Mozilla Firefox および Firefox ESR のスタイルインスペクタは、HTML マークアップおよび Cascading Style Sheets (CSS) トークンシーケンスのコンテキストを適切に制限しないため、クローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-4210 57448 CVE-2012-4210 45655 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005459.html 2012-11-20 2016-02-16 View