Lucene search

[email protected]CVE-2012-4196

HistoryOct 29, 2012 - 6:55 p.m.

CVE-2012-4196

2012-10-2918:55:01

CWE-74

[email protected]

web.nvd.nist.gov

cve-2012-4196

mozilla firefox

thunderbird

remote code execution

same origin policy

security vulnerability

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

8.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object.

Affected configurations

NVD

Node

mozillafirefoxRange<16.0.2

mozillafirefox_esrRange10.0–10.0.10

mozillaseamonkeyRange<2.13.2

mozillathunderbirdRange<16.0.2

mozillathunderbird_esrRange10.0–10.0.10

Node

opensuseopensuseMatch11.4

opensuseopensuseMatch12.1

opensuseopensuseMatch12.2

suselinux_enterprise_desktopMatch10sp4

suselinux_enterprise_desktopMatch11sp2

suselinux_enterprise_serverMatch10sp4

suselinux_enterprise_serverMatch11sp2-

suselinux_enterprise_serverMatch11sp2vmware

suselinux_enterprise_software_development_kitMatch10sp4

suselinux_enterprise_software_development_kitMatch11sp2

Node

canonicalubuntu_linuxMatch10.04-

canonicalubuntu_linuxMatch11.04

canonicalubuntu_linuxMatch11.10

canonicalubuntu_linuxMatch12.04esm

canonicalubuntu_linuxMatch12.10

Node

redhatenterprise_linux_desktopMatch5.0

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_eusMatch6.3

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_workstationMatch5.0

redhatenterprise_linux_workstationMatch6.0

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxlt16.0.2
mozilla:firefox_esrmozilla firefox esrlt10.0.10
mozilla:seamonkeymozilla seamonkeylt2.13.2
mozilla:thunderbirdmozilla thunderbirdlt16.0.2
mozilla:thunderbird_esrmozilla thunderbird esrlt10.0.10

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	lt	16.0.2
mozilla:firefox_esr	mozilla firefox esr	lt	10.0.10
mozilla:seamonkey	mozilla seamonkey	lt	2.13.2
mozilla:thunderbird	mozilla thunderbird	lt	16.0.2
mozilla:thunderbird_esr	mozilla thunderbird esr	lt	10.0.10