Lucene search
Ubuntu.comUB:CVE-2012-5837HistoryNov 21, 2012 - 12:00 a.m.
CVE-2012-5837
2012-11-2100:00:00
ubuntu.com
ubuntu.com
6
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.1%
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script
with chrome privileges, which allows user-assisted remote attackers to
conduct cross-site scripting (XSS) attacks via a crafted string.
Notes
| Author | Note |
|---|---|
| jdstrand | xulrunner-1.9.2 unmaintained upstream (see README.mozilla for details) |
| micahg | Firefox only per MFSA |
Related
cvelist
cvelist
CVE-2012-5837
2012-11-21 11:00:00
nvd
nvd
CVE-2012-5837
2012-11-21 12:55:03
prion
prion
Cross site scripting
2012-11-21 12:55:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-102) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)
2012-11-26 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Mac OS X)
2012-11-26 00:00:00
mozilla
mozilla
Script entered into Developer Toolbar runs with chrome privileges — Mozilla
2012-11-20 00:00:00
cve
cve
CVE-2012-5837
2012-11-21 12:55:03
nessus
nessus
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : firefox vulnerabilities (USN-1638-1)
2012-11-23 00:00:00
SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7093)
2013-01-25 00:00:00
Mozilla Firefox < 17.0 Multiple Vulnerabilities
2012-11-29 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2012-11-21 00:00:00
Firefox regressions
2012-12-03 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2012-11-29 01:08:52
security update to Firefox 17.0 and other Mozilla based packages (important)
2013-01-23 14:07:31
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-11-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-12-03 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.1%
Related for UB:CVE-2012-5837