Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-0455
HistoryMar 14, 2012 - 7:55 p.m.

CVE-2012-0455

2012-03-1419:55:01
CWE-79
[email protected]
web.nvd.nist.gov
50
cve-2012-0455
mozilla firefox
thunderbird
seamonkey
xss
draganddropjacking
cross-site scripting

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

8.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

JSON

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a “DragAndDropJacking” issue.

Affected configurations

NVD
Node
mozillafirefoxRange≤3.6.27
Node
mozillafirefoxMatch4.0
OR
mozillafirefoxMatch4.0beta1
OR
mozillafirefoxMatch4.0beta10
OR
mozillafirefoxMatch4.0beta11
OR
mozillafirefoxMatch4.0beta12
OR
mozillafirefoxMatch4.0beta2
OR
mozillafirefoxMatch4.0beta3
OR
mozillafirefoxMatch4.0beta4
OR
mozillafirefoxMatch4.0beta5
OR
mozillafirefoxMatch4.0beta6
OR
mozillafirefoxMatch4.0beta7
OR
mozillafirefoxMatch4.0beta8
OR
mozillafirefoxMatch4.0beta9
OR
mozillafirefoxMatch4.0.1
OR
mozillafirefoxMatch5.0
OR
mozillafirefoxMatch5.0.1
OR
mozillafirefoxMatch6.0
OR
mozillafirefoxMatch6.0.1
OR
mozillafirefoxMatch6.0.2
OR
mozillafirefoxMatch7.0
OR
mozillafirefoxMatch7.0.1
OR
mozillafirefoxMatch8.0
OR
mozillafirefoxMatch8.0.1
OR
mozillafirefoxMatch9.0
OR
mozillafirefoxMatch9.0.1
Node
mozillafirefox_esrMatch10.0
OR
mozillafirefox_esrMatch10.1
OR
mozillafirefox_esrMatch10.2
Node
mozillathunderbirdRange≤3.1.19
Node
mozillathunderbirdMatch5.0
OR
mozillathunderbirdMatch6.0
OR
mozillathunderbirdMatch6.0.1
OR
mozillathunderbirdMatch6.0.2
OR
mozillathunderbirdMatch8.0
OR
mozillathunderbirdMatch9.0
OR
mozillathunderbirdMatch9.0.1
Node
mozillathunderbird_esrMatch10.0
OR
mozillathunderbird_esrMatch10.0.1
OR
mozillathunderbird_esrMatch10.0.2
Node
mozillaseamonkeyRange≤2.7beta5
CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle3.6.27

References

Related

cvelist 1
mozilla 1
veracode 1
ubuntucve 1
prion 1
nvd 1
openvas 49
nessus 46
osv 3
debian 3
ubuntu 7
suse 3
redhat 2
centos 2
oraclelinux 2
freebsd 1
securityvulns 1
gentoo 1
cvelist
cvelist
CVE-2012-0455
2012-03-14 19:00:00
mozilla
mozilla
XSS with Drag and Drop and Javascript: URL — Mozilla
2012-03-13 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2020-04-10 01:07:54
ubuntucve
ubuntucve
CVE-2012-0455
2012-03-14 00:00:00
prion
prion
Cross site scripting
2012-03-14 19:55:00
nvd
nvd
CVE-2012-0455
2012-03-14 19:55:01
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-13) - Linux
2021-11-16 00:00:00
Debian: Security Advisory (DSA-2437-1)
2012-04-30 00:00:00
Debian Security Advisory DSA 2437-1 (icedove)
2012-04-30 00:00:00
nessus
nessus
Debian DSA-2433-1 : iceweasel - several vulnerabilities
2012-03-16 00:00:00
Debian DSA-2437-1 : icedove - several vulnerabilities
2012-03-22 00:00:00
Firefox 3.6.x < 3.6.28 Multiple Vulnerabilities
2012-03-15 00:00:00
osv
osv
iceweasel - several
2012-03-15 00:00:00
icedove - several
2012-03-21 00:00:00
iceape - several
2012-05-13 00:00:00
debian
debian
[SECURITY] [DSA 2433-1] iceweasel security update
2012-03-15 21:42:10
[SECURITY] [DSA 2437-1] icedove security update
2012-03-21 18:58:26
[SECURITY] [DSA 2548-1] iceape security update
2012-04-24 20:56:27
ubuntu
ubuntu
Xulrunner vulnerabilities
2012-03-19 00:00:00
Thunderbird vulnerabilities
2012-03-23 00:00:00
Thunderbird vulnerabilities
2012-03-21 00:00:00
suse
suse
Security update for Mozilla Firefox (critical)
2012-03-29 06:08:20
Security update for Mozilla Firefox (critical)
2012-03-28 21:08:31
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
redhat
redhat
(RHSA-2012:0387) Critical: firefox security and bug fix update
2012-03-14 00:00:00
(RHSA-2012:0388) Critical: thunderbird security update
2012-03-14 00:00:00
centos
centos
firefox, xulrunner security update
2012-03-14 11:23:06
thunderbird security update
2012-03-14 11:41:24
oraclelinux
oraclelinux
thunderbird security update
2012-03-14 00:00:00
firefox security and bug fix update
2012-03-14 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-03-13 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-03-17 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

8.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

JSON
Related for CVE-2012-0455
cvelist1mozilla1veracode1ubuntucve1prion1nvd1openvas49nessus46osv3debian3ubuntu7suse3redhat2centos2oraclelinux2freebsd1securityvulns1gentoo1