NVD

Id
46899  
Name
CVE-2012-5883  
Description
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore.swf, a similar issue to CVE-2010-4209.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2012-11-16  
Modified Date
2017-04-20  
Seq
2012-5883  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234901 46899 CVE-2012-5883 http://www.bugzilla.org/security/3.6.11/  View
234902 46899 CVE-2012-5883 MDVSA-2013:066  View
234903 46899 CVE-2012-5883 http://www.yuiblog.com/blog/2012/10/30/security-announcement-swf-vulnerability-in-yui-2/  View
234904 46899 CVE-2012-5883 http://www.yuiblog.com/blog/2012/11/05/post-mortem-swf-vulnerability-in-yui-2/  View
234905 46899 CVE-2012-5883 bugzilla-flash-xss(80116)  View
234906 46899 CVE-2012-5883 http://yuilibrary.com/support/20121030-vulnerability/  View
234907 46899 CVE-2012-5883 https://bugzilla.mozilla.org/show_bug.cgi?id=808845  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29665 JVNDB-2012-005372 Bugzilla で使用される YUI におけるクロスサイトスクリプティングの脆弱性 Bugzilla で使用される YUI の Flash インフラストラクチャコンポーネントには、swfstore.swf に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5883 59121 CVE-2012-5883 46899 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005372.html 2012-11-16 2012-11-19 View