Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-0479
HistoryApr 25, 2012 - 12:00 a.m.

CVE-2012-0479

2012-04-2500:00:00
ubuntu.com
ubuntu.com
9

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.7%

Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4,
Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and
SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an
https URL for invalid (1) RSS or (2) Atom XML content.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 12.0+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.04noarchfirefox< 12.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 12.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 12.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu10.04noarchthunderbird< 12.0.1+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.04noarchthunderbird< 12.0.1+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 12.0.1+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 12.0.1+build1-0ubuntu0.12.04.1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.7%