CVE-2012-0458

2012-03-1400:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

85.7%

JSON

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before
10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR
10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict
setting the home page through the dragging of a URL to the home button,
which allows user-assisted remote attackers to execute arbitrary JavaScript
code with chrome privileges via a javascript: URL that is later interpreted
in the about:sessionrestore context.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 11.0+build1-0ubuntu0.10.04.2UNKNOWN
ubuntu10.10noarchfirefox< 11.0+build1-0ubuntu0.10.10.2UNKNOWN
ubuntu11.04noarchfirefox< 11.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 11.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 11.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2< 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2< 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	firefox	< 11.0+build1-0ubuntu0.10.04.2	UNKNOWN
ubuntu	10.10	noarch	firefox	< 11.0+build1-0ubuntu0.10.10.2	UNKNOWN
ubuntu	11.04	noarch	firefox	< 11.0+build1-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	firefox	< 11.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	10.04	noarch	thunderbird	< 3.1.20+build1+nobinonly-0ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	thunderbird	< 3.1.20+build1+nobinonly-0ubuntu0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	thunderbird	< 3.1.20+build1+nobinonly-0ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	thunderbird	< 11.0+build1-0ubuntu0.11.10.1	UNKNOWN
ubuntu	10.04	noarch	xulrunner-1.9.2	< 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	xulrunner-1.9.2	< 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1	UNKNOWN