Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-4194
HistoryOct 26, 2012 - 12:00 a.m.

CVE-2012-4194

2012-10-2600:00:00
ubuntu.com
ubuntu.com
7

0.004 Low

EPSS

Percentile

73.1%

JSON

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird
before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before
2.13.2 do not prevent use of the valueOf method to shadow the location
object (aka window.location), which makes it easier for remote attackers to
conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

Bugs

Notes

Author Note
jdstrand xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details)
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 16.0.2+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.04noarchfirefox< 16.0.2+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 16.0.2+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 16.0.2+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchfirefox< 17.0~b1+build1-0ubuntu1UNKNOWN
ubuntu13.10noarchfirefox< 17.0~b1+build1-0ubuntu1UNKNOWN
ubuntu10.04noarchthunderbird< 16.0.2+build1-0ubuntu0.10.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 16.0.2+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchthunderbird< 16.0.2+build1-0ubuntu0.12.04.1UNKNOWN
Rows per page:
1-10 of 131

Related

prion 1
cve 1
cvelist 1
veracode 3
fedora 1
nessus 28
openvas 46
suse 3
redhat 2
oraclelinux 2
centos 2
freebsd 1
ubuntu 2
mozilla 1
ibm 2
gentoo 1
prion
prion
Cross site scripting
2012-10-29 18:55:00
cve
cve
CVE-2012-4194
2012-10-29 18:55:00
cvelist
cvelist
CVE-2012-4194
2012-10-29 18:00:00
veracode
veracode
Cross-site Scripting (XSS)
2019-01-15 08:59:31
Same-Origin Policy Bypass
2019-05-02 04:43:52
Arbitrary Code Execution
2019-05-02 04:43:52
fedora
fedora
[SECURITY] Fedora 18 Update: seamonkey-2.13.2-2.fc18
2012-11-14 02:12:21
nessus
nessus
Fedora 18 : seamonkey-2.13.2-2.fc18 (2012-17841)
2012-11-14 00:00:00
SeaMonkey < 2.13.2 Multiple Vulnerabilities
2012-10-29 00:00:00
Firefox < 10.0.10 Multiple Vulnerabilities (Mac OS X)
2012-10-29 00:00:00
openvas
openvas
RedHat Update for firefox RHSA-2012:1407-01
2012-10-29 00:00:00
RedHat Update for thunderbird RHSA-2012:1413-01
2012-11-02 00:00:00
CentOS Update for firefox CESA-2012:1407 centos6
2012-10-29 00:00:00
suse
suse
Mozilla Suite: Update to 16.0.2 (important)
2012-10-30 01:08:34
Security update for Mozilla Firefox (important)
2012-10-31 22:08:42
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
redhat
redhat
(RHSA-2012:1413) Important: thunderbird security update
2012-10-29 00:00:00
(RHSA-2012:1407) Critical: firefox security update
2012-10-26 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2012-10-29 00:00:00
firefox security update
2012-10-26 00:00:00
centos
centos
thunderbird security update
2012-10-30 03:07:34
firefox, xulrunner security update
2012-10-27 02:12:20
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-10-26 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2012-10-26 00:00:00
Thunderbird vulnerabilities
2012-10-30 00:00:00
mozilla
mozilla
Fixes for Location object issues — Mozilla
2012-10-26 00:00:00
ibm
ibm
Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

0.004 Low

EPSS

Percentile

73.1%

JSON
Related for UB:CVE-2012-4194
prion1cve1cvelist1veracode3fedora1nessus28openvas46suse3redhat2oraclelinux2centos2freebsd1ubuntu2mozilla1ibm2gentoo1