Lucene search
RootSSV:60083HistoryApr 27, 2012 - 12:00 a.m.
Mozilla Firefox/Thunderbird/Seamonkey跨站脚本执行漏洞
2012-04-2700:00:00
Root
www.seebug.org
20
0.003 Low
EPSS
Percentile
63.8%
BUGTRAQ ID: 53219
CVE ID: CVE-2012-0471
Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。
Mozilla Firefox、Thunderbird和Seamonkey在多字节内容处理的实现上存在XSS漏洞，攻击者可利用此漏洞执行任意脚本代码，窃取cookie身份验证凭证并发动其他攻击。
0
Mozilla Firefox < 12.0
Mozilla Thunderbird < 12.0
Mozilla SeaMonkey < 2.9
厂商补丁：
Mozilla
Mozilla已经为此发布了一个安全公告（mfsa2012-24）以及相应补丁:
mfsa2012-24：Potential XSS via multibyte content processing errors
链接：http://www.mozilla.org/security/announce/2012/mfsa2012-24.html
Related
cve
cve
CVE-2012-0471
2012-04-25 10:10:00
ubuntucve
ubuntucve
CVE-2012-0471
2012-04-25 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 01:09:09
cvelist
cvelist
CVE-2012-0471
2012-04-25 10:00:00
prion
prion
Cross site scripting
2012-04-25 10:10:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-24) - Linux
2021-11-11 00:00:00
Debian Security Advisory DSA 2464-1 (icedove)
2012-05-31 00:00:00
Debian Security Advisory DSA 2457-2 (iceweasel - several vulnerabilities)
2013-09-18 00:00:00
mozilla
mozilla
Potential XSS via multibyte content processing errors — Mozilla
2012-04-24 00:00:00
nessus
nessus
Debian DSA-2457-2 : iceweasel - several vulnerabilities
2012-04-25 00:00:00
Debian DSA-2464-2 : icedove - several vulnerabilities
2012-05-04 00:00:00
Debian DSA-2458-2 : iceape - several vulnerabilities
2012-04-25 00:00:00
osv
osv
icedove - regression
2012-05-08 00:00:00
iceweasel - several
2012-05-13 00:00:00
icedove - several
2012-05-08 00:00:00
debian
debian
[SECURITY] [DSA 2464-1] icedove security update
2012-05-03 15:46:24
[SECURITY] [DSA 2457-2] New icedove/iceweasel packages fix regression
2012-05-13 21:09:52
[SECURITY] [DSA 2457-1] iceweasel security update
2012-04-24 20:35:43
oraclelinux
oraclelinux
firefox security update
2012-04-25 00:00:00
thunderbird security update
2012-04-25 00:00:00
redhat
redhat
(RHSA-2012:0515) Critical: firefox security update
2012-04-24 00:00:00
(RHSA-2012:0516) Critical: thunderbird security update
2012-04-24 00:00:00
centos
centos
firefox, xulrunner security update
2012-04-25 01:27:20
thunderbird security update
2012-04-25 01:30:17
ubuntu
ubuntu
ubufox update
2012-04-27 00:00:00
Firefox vulnerabilities
2012-04-27 00:00:00
Thunderbird vulnerabilities
2012-05-04 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2012-06-02 02:08:30
Security update for Mozilla Firefox (important)
2012-05-02 19:08:16
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-05-09 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-04-24 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00