PRIOn knowledge basePRION:CVE-2012-3992Cross site scripting
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
71.9%
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.
References
lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
rhn.redhat.com/errata/RHSA-2012-1351.html
secunia.com/advisories/50856
secunia.com/advisories/50892
secunia.com/advisories/50904
secunia.com/advisories/50935
secunia.com/advisories/50936
secunia.com/advisories/50984
secunia.com/advisories/55318
www.mandriva.com/security/advisories?name=MDVSA-2012:163
www.mozilla.org/security/announce/2012/mfsa2012-84.html
www.securityfocus.com/bid/56128
www.ubuntu.com/usn/USN-1611-1
bugzilla.mozilla.org/show_bug.cgi?id=775009
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16987
Related
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
71.9%