Lucene search
Ubuntu.comUB:CVE-2012-4203HistoryNov 21, 2012 - 12:00 a.m.
CVE-2012-4203
2012-11-2100:00:00
ubuntu.com
ubuntu.com
6
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.055 Low
EPSS
Percentile
93.3%
The New Tab page in Mozilla Firefox before 17.0 uses a privileged context
for execution of JavaScript code by bookmarklets, which allows
user-assisted remote attackers to run arbitrary programs by leveraging a
javascript: URL in a bookmark.
Notes
| Author | Note |
|---|---|
| jdstrand | xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details) |
| micahg | Firefox only per MFSA |
Related
cve
cve
CVE-2012-4203
2012-11-21 12:55:01
seebug
seebug
Mozilla Firefoxζ°ζ ηΎι‘΅ηΉζζεζΌζ΄(CVE-2012-4203)
2012-11-23 00:00:00
nvd
nvd
CVE-2012-4203
2012-11-21 12:55:01
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-95) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)
2012-11-26 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Mac OS X)
2012-11-26 00:00:00
cvelist
cvelist
CVE-2012-4203
2012-11-21 11:00:00
prion
prion
Code injection
2012-11-21 12:55:00
mozilla
mozilla
Javascript: URLs run in privileged context on New Tab page β Mozilla
2012-11-20 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : ubufox update (USN-1638-2)
2012-11-23 00:00:00
Mozilla Firefox < 17.0 Multiple Vulnerabilities
2012-11-29 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2012-11-21 00:00:00
Firefox regressions
2012-12-03 00:00:00
ubufox update
2012-11-21 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2012-11-29 01:08:52
security update to Firefox 17.0 and other Mozilla based packages (important)
2013-01-23 14:07:31
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-11-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-12-03 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.055 Low
EPSS
Percentile
93.3%
Related for UB:CVE-2012-4203