NVD

Id
46873  
Name
CVE-2012-5841  
Description
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-21  
Modified Date
2013-11-02  
Seq
2012-5841  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234736 46873 CVE-2012-5841 SUSE-SU-2012:1592  View
234737 46873 CVE-2012-5841 openSUSE-SU-2013:0175  View
234738 46873 CVE-2012-5841 openSUSE-SU-2012:1583  View
234739 46873 CVE-2012-5841 openSUSE-SU-2012:1585  View
234740 46873 CVE-2012-5841 openSUSE-SU-2012:1586  View
234741 46873 CVE-2012-5841 oval:org.mitre.oval:def:16590  View
234742 46873 CVE-2012-5841 RHSA-2012:1482  View
234743 46873 CVE-2012-5841 RHSA-2012:1483  View
234744 46873 CVE-2012-5841 MDVSA-2012:173  View
234745 46873 CVE-2012-5841 http://www.mozilla.org/security/announce/2012/mfsa2012-100.html  View
234746 46873 CVE-2012-5841 56631  View
234747 46873 CVE-2012-5841 USN-1636-1  View
234748 46873 CVE-2012-5841 USN-1638-1  View
234749 46873 CVE-2012-5841 USN-1638-2  View
234750 46873 CVE-2012-5841 USN-1638-3  View
234751 46873 CVE-2012-5841 mozilla-wrappers-security-bypass(80178)  View
234752 46873 CVE-2012-5841 https://bugzilla.mozilla.org/show_bug.cgi?id=805807  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29769 JVNDB-2012-005476 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品のフィルタリングを行うクロスオリジンラッパーの実装は、書き込み操作を適切に制限しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2012-5841 59079 CVE-2012-5841 46873 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005476.html 2012-11-20 2016-02-16 View