Lucene search
Mozilla FoundationMFSA2012-102HistoryNov 20, 2012 - 12:00 a.m.
Script entered into Developer Toolbar runs with chrome privileges — Mozilla
2012-11-2000:00:00
Mozilla Foundation
www.mozilla.org
26
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.1%
Security researcher Masato Kinugawa reported that when script is entered into the Developer Toolbar, it runs in a chrome privileged context. This allows for arbitrary code execution or cross-site scripting (XSS) if a user can be convinced to paste malicious code into the Developer Toolbar.
Affected configurations
Node
mozillafirefoxRange<17
Related
cvelist
cvelist
CVE-2012-5837
2012-11-21 11:00:00
nvd
nvd
CVE-2012-5837
2012-11-21 12:55:03
prion
prion
Cross site scripting
2012-11-21 12:55:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-102) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)
2012-11-26 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Mac OS X)
2012-11-26 00:00:00
cve
cve
CVE-2012-5837
2012-11-21 12:55:03
ubuntucve
ubuntucve
CVE-2012-5837
2012-11-21 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : firefox vulnerabilities (USN-1638-1)
2012-11-23 00:00:00
SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7093)
2013-01-25 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2012:1585-1)
2014-06-13 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2012-11-29 01:08:52
security update to Firefox 17.0 and other Mozilla based packages (important)
2013-01-23 14:07:31
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
ubuntu
ubuntu
Firefox regressions
2012-12-03 00:00:00
Firefox vulnerabilities
2012-11-21 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-11-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-12-03 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.1%
Related for MFSA2012-102