CVE-2012-0458

Exploit

EPSS 2.77%
Veröffentlicht 14.03.2012 19:55:02
Zuletzt bearbeitet 16.06.2026 23:37:19
Erkennungen
Login

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 39

NVD 114 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 3.6.27

Mozilla ≫ Firefox Version > 4.0 <= 10.0

Mozilla ≫ Firefox Version 10.0

Mozilla ≫ Firefox Version 10.0.1

Mozilla ≫ Firefox Version 10.0.2

Mozilla ≫ Thunderbird Version >= 1.0 <= 3.1.19

Mozilla ≫ Thunderbird Version > 5.0 <= 10.0

Mozilla ≫ Thunderbird Esr Version 10.0

Mozilla ≫ Thunderbird Esr Version 10.0.1

Mozilla ≫ Thunderbird Esr Version 10.0.2

Mozilla ≫ Seamonkey Version -

Mozilla ≫ Seamonkey Version 1.0

Mozilla ≫ Seamonkey Version 1.0 Update alpha

Mozilla ≫ Seamonkey Version 1.0 Update beta

Mozilla ≫ Seamonkey Version 1.0.1

Mozilla ≫ Seamonkey Version 1.0.2

Mozilla ≫ Seamonkey Version 1.0.3

Mozilla ≫ Seamonkey Version 1.0.4

Mozilla ≫ Seamonkey Version 1.0.5

Mozilla ≫ Seamonkey Version 1.0.6

Mozilla ≫ Seamonkey Version 1.0.7

Mozilla ≫ Seamonkey Version 1.0.8

Mozilla ≫ Seamonkey Version 1.0.9

Mozilla ≫ Seamonkey Version 1.1

Mozilla ≫ Seamonkey Version 1.1 Update alpha

Mozilla ≫ Seamonkey Version 1.1 Update beta

Mozilla ≫ Seamonkey Version 1.1.1

Mozilla ≫ Seamonkey Version 1.1.2

Mozilla ≫ Seamonkey Version 1.1.3

Mozilla ≫ Seamonkey Version 1.1.4

Mozilla ≫ Seamonkey Version 1.1.5

Mozilla ≫ Seamonkey Version 1.1.6

Mozilla ≫ Seamonkey Version 1.1.7

Mozilla ≫ Seamonkey Version 1.1.8

Mozilla ≫ Seamonkey Version 1.1.9

Mozilla ≫ Seamonkey Version 1.1.10

Mozilla ≫ Seamonkey Version 1.1.11

Mozilla ≫ Seamonkey Version 1.1.12

Mozilla ≫ Seamonkey Version 1.1.13

Mozilla ≫ Seamonkey Version 1.1.14

Mozilla ≫ Seamonkey Version 1.1.15

Mozilla ≫ Seamonkey Version 1.1.16

Mozilla ≫ Seamonkey Version 1.1.17

Mozilla ≫ Seamonkey Version 1.1.18

Mozilla ≫ Seamonkey Version 1.1.19

Mozilla ≫ Seamonkey Version 1.5.0.8

Mozilla ≫ Seamonkey Version 1.5.0.9

Mozilla ≫ Seamonkey Version 1.5.0.10

Mozilla ≫ Seamonkey Version 2.0

Mozilla ≫ Seamonkey Version 2.0 Update alpha_1

Mozilla ≫ Seamonkey Version 2.0 Update alpha_2

Mozilla ≫ Seamonkey Version 2.0 Update alpha_3

Mozilla ≫ Seamonkey Version 2.0 Update beta_1

Mozilla ≫ Seamonkey Version 2.0 Update beta_2

Mozilla ≫ Seamonkey Version 2.0 Update rc1

Mozilla ≫ Seamonkey Version 2.0 Update rc2

Mozilla ≫ Seamonkey Version 2.0.1

Mozilla ≫ Seamonkey Version 2.0.2

Mozilla ≫ Seamonkey Version 2.0.3

Mozilla ≫ Seamonkey Version 2.0.4

Mozilla ≫ Seamonkey Version 2.0.5

Mozilla ≫ Seamonkey Version 2.0.6

Mozilla ≫ Seamonkey Version 2.0.7

Mozilla ≫ Seamonkey Version 2.0.8

Mozilla ≫ Seamonkey Version 2.0.9

Mozilla ≫ Seamonkey Version 2.0.10

Mozilla ≫ Seamonkey Version 2.0.11

Mozilla ≫ Seamonkey Version 2.0.12

Mozilla ≫ Seamonkey Version 2.0.13

Mozilla ≫ Seamonkey Version 2.0.14

Mozilla ≫ Seamonkey Version 2.1

Mozilla ≫ Seamonkey Version 2.1 Update alpha1

Mozilla ≫ Seamonkey Version 2.1 Update alpha2

Mozilla ≫ Seamonkey Version 2.1 Update alpha3

Mozilla ≫ Seamonkey Version 2.1 Update beta1

Mozilla ≫ Seamonkey Version 2.1 Update beta2

Mozilla ≫ Seamonkey Version 2.1 Update beta3

Mozilla ≫ Seamonkey Version 2.1 Update rc1

Mozilla ≫ Seamonkey Version 2.1 Update rc2

Mozilla ≫ Seamonkey Version 2.2

Mozilla ≫ Seamonkey Version 2.2 Update beta1

Mozilla ≫ Seamonkey Version 2.2 Update beta2

Mozilla ≫ Seamonkey Version 2.2 Update beta3

Mozilla ≫ Seamonkey Version 2.3

Mozilla ≫ Seamonkey Version 2.3 Update beta1

Mozilla ≫ Seamonkey Version 2.3 Update beta2

Mozilla ≫ Seamonkey Version 2.3 Update beta3

Mozilla ≫ Seamonkey Version 2.3.1

Mozilla ≫ Seamonkey Version 2.3.2

Mozilla ≫ Seamonkey Version 2.3.3

Mozilla ≫ Seamonkey Version 2.4

Mozilla ≫ Seamonkey Version 2.4 Update beta1

Mozilla ≫ Seamonkey Version 2.4 Update beta2

Mozilla ≫ Seamonkey Version 2.4 Update beta3

Mozilla ≫ Seamonkey Version 2.4.1

Mozilla ≫ Seamonkey Version 2.5

Mozilla ≫ Seamonkey Version 2.5 Update beta1

Mozilla ≫ Seamonkey Version 2.5 Update beta2

Mozilla ≫ Seamonkey Version 2.5 Update beta3

Mozilla ≫ Seamonkey Version 2.5 Update beta4

Mozilla ≫ Seamonkey Version 2.6

Mozilla ≫ Seamonkey Version 2.6 Update beta1

Mozilla ≫ Seamonkey Version 2.6 Update beta2

Mozilla ≫ Seamonkey Version 2.6 Update beta3

Mozilla ≫ Seamonkey Version 2.6 Update beta4

Mozilla ≫ Seamonkey Version 2.6.1

Mozilla ≫ Seamonkey Version 2.7

Mozilla ≫ Seamonkey Version 2.7 Update beta1

Mozilla ≫ Seamonkey Version 2.7 Update beta2

Mozilla ≫ Seamonkey Version 2.7 Update beta3

Mozilla ≫ Seamonkey Version 2.7 Update beta4

Mozilla ≫ Seamonkey Version 2.7 Update beta5

Mozilla ≫ Seamonkey Version 2.7.1

Mozilla ≫ Seamonkey Version 2.7.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.77%	0.849

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html

Third Party Advisory

http://secunia.com/advisories/48495

Third Party Advisory

http://secunia.com/advisories/48553

Third Party Advisory

http://secunia.com/advisories/48823

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:031

http://www.ubuntu.com/usn/USN-1401-1

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html

http://rhn.redhat.com/errata/RHSA-2012-0387.html

http://rhn.redhat.com/errata/RHSA-2012-0388.html

http://secunia.com/advisories/48359

http://secunia.com/advisories/48402

http://secunia.com/advisories/48496

Third Party Advisory

http://secunia.com/advisories/48513

Third Party Advisory

http://secunia.com/advisories/48561

Third Party Advisory

http://secunia.com/advisories/48629

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:032

http://www.securitytracker.com/id?1026801

http://www.securitytracker.com/id?1026803

http://www.securitytracker.com/id?1026804

http://www.ubuntu.com/usn/USN-1400-1

http://www.ubuntu.com/usn/USN-1400-2

Third Party Advisory

http://www.ubuntu.com/usn/USN-1400-3

Third Party Advisory

http://www.ubuntu.com/usn/USN-1400-4

Third Party Advisory

http://www.ubuntu.com/usn/USN-1400-5

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html

http://secunia.com/advisories/48414

http://secunia.com/advisories/48624

Third Party Advisory

http://secunia.com/advisories/48920

Third Party Advisory

http://www.debian.org/security/2012/dsa-2433

Third Party Advisory

http://www.debian.org/security/2012/dsa-2458

http://www.mozilla.org/security/announce/2012/mfsa2012-16.html

Vendor Advisory

http://www.securityfocus.com/bid/52460

https://bugzilla.mozilla.org/show_bug.cgi?id=718203

Vendor Advisory

Exploit

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=719994

Vendor Advisory

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=723808

Patch

Vendor Advisory

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15122

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2012-0458

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0458

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0458

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-0458