Lucene search
Ubuntu.comUB:CVE-2012-3965HistoryAug 29, 2012 - 12:00 a.m.
CVE-2012-3965
2012-08-2900:00:00
ubuntu.com
ubuntu.com
7
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
86.2%
Mozilla Firefox before 15.0 does not properly restrict navigation to the
about:newtab page, which allows remote attackers to execute arbitrary
JavaScript code with chrome privileges via a crafted web site that triggers
creation of a new tab and then a new window.
Notes
| Author | Note |
|---|---|
| micahg | per upstream MFSA, only affects Firefox |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | <Β 15.0+build1-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | firefox | <Β 15.0+build1-0ubuntu0.11.04.2 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | <Β 15.0+build1-0ubuntu0.11.10.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | firefox | <Β 15.0+build1-0ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 12.10 | noarch | firefox | <Β 15.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 13.04 | noarch | firefox | <Β 15.0+build1-0ubuntu1 | UNKNOWN |
| ubuntu | 13.10 | noarch | firefox | <Β 15.0+build1-0ubuntu1 | UNKNOWN |
Related
prion
prion
Code injection
2012-08-29 10:56:00
mozilla
mozilla
Escalation of privilege through about:newtab β Mozilla
2012-08-28 00:00:00
cve
cve
CVE-2012-3965
2012-08-29 10:56:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-60) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - August12 (Mac OS X)
2012-08-30 00:00:00
Mozilla Firefox Multiple Vulnerabilities - August12 (Windows)
2012-08-30 00:00:00
seebug
seebug
Mozilla Firefox about:newtabζιζεζΌζ΄
2012-08-30 00:00:00
suse
suse
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:15
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:32
Security update for Mozilla Firefox (important)
2012-09-14 02:08:30
nessus
nessus
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1064-1)
2014-06-13 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1065-1)
2014-06-13 00:00:00
Mozilla Firefox < 15.0 Multiple Vulnerabilities
2012-08-30 00:00:00
ubuntu
ubuntu
Firefox regression
2012-09-11 00:00:00
Firefox vulnerabilities
2012-08-29 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-08-28 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-09-18 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
86.2%
Related for UB:CVE-2012-3965