Lucene search

K
mozillaMozilla FoundationMFSA2012-32
HistoryApr 24, 2012 - 12:00 a.m.

HTTP Redirections and remote content can be read by javascript errors — Mozilla

2012-04-2400:00:00
Mozilla Foundation
www.mozilla.org
15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%

Security researcher Daniel Divricean reported that a defect in the error handling of javascript errors can leak the file names and location of javascript files on a server, leading to inadvertent information disclosure and a vector for further attacks.

Affected configurations

Vulners
Node
mozillafirefoxRange<12
OR
mozillaseamonkeyRange<2.9
OR
mozillathunderbirdRange<12
CPENameOperatorVersion
firefoxlt12
seamonkeylt2.9
thunderbirdlt12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%