CVE-2012-0460

EPSS 2.01%
Veröffentlicht 14.03.2012 19:55:02
Zuletzt bearbeitet 16.06.2026 23:37:19
Erkennungen
Login

Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 27

NVD 140 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version 4.0

Mozilla ≫ Firefox Version 4.0 Update beta1

Mozilla ≫ Firefox Version 4.0 Update beta10

Mozilla ≫ Firefox Version 4.0 Update beta11

Mozilla ≫ Firefox Version 4.0 Update beta12

Mozilla ≫ Firefox Version 4.0 Update beta2

Mozilla ≫ Firefox Version 4.0 Update beta3

Mozilla ≫ Firefox Version 4.0 Update beta4

Mozilla ≫ Firefox Version 4.0 Update beta5

Mozilla ≫ Firefox Version 4.0 Update beta6

Mozilla ≫ Firefox Version 4.0 Update beta7

Mozilla ≫ Firefox Version 4.0 Update beta8

Mozilla ≫ Firefox Version 4.0 Update beta9

Mozilla ≫ Firefox Version 4.0.1

Mozilla ≫ Firefox Version 5.0

Mozilla ≫ Firefox Version 5.0.1

Mozilla ≫ Firefox Version 6.0

Mozilla ≫ Firefox Version 6.0.1

Mozilla ≫ Firefox Version 6.0.2

Mozilla ≫ Firefox Version 7.0

Mozilla ≫ Firefox Version 7.0.1

Mozilla ≫ Firefox Version 8.0

Mozilla ≫ Firefox Version 8.0.1

Mozilla ≫ Firefox Version 9.0

Mozilla ≫ Firefox Version 9.0.1

Mozilla ≫ Firefox Version 10.0

Mozilla ≫ Firefox ESR Version 10.1

Mozilla ≫ Firefox ESR Version 10.2

Mozilla ≫ Thunderbird Version 5.0

Mozilla ≫ Thunderbird Version 6.0

Mozilla ≫ Thunderbird Version 6.0.1

Mozilla ≫ Thunderbird Version 6.0.2

Mozilla ≫ Thunderbird Version 7.0

Mozilla ≫ Thunderbird Version 7.0.1

Mozilla ≫ Thunderbird Version 8.0

Mozilla ≫ Thunderbird Version 9.0

Mozilla ≫ Thunderbird Version 9.0.1

Mozilla ≫ Thunderbird Esr Version 10.0

Mozilla ≫ Thunderbird Esr Version 10.0.1

Mozilla ≫ Thunderbird Esr Version 10.0.2

Mozilla ≫ Seamonkey Update beta5 Version <= 2.7

Mozilla ≫ Seamonkey Version 1.0

Mozilla ≫ Seamonkey Version 1.0 Update alpha

Mozilla ≫ Seamonkey Version 1.0 Update beta

Mozilla ≫ Seamonkey Version 1.0.1

Mozilla ≫ Seamonkey Version 1.0.2

Mozilla ≫ Seamonkey Version 1.0.3

Mozilla ≫ Seamonkey Version 1.0.4

Mozilla ≫ Seamonkey Version 1.0.5

Mozilla ≫ Seamonkey Version 1.0.6

Mozilla ≫ Seamonkey Version 1.0.7

Mozilla ≫ Seamonkey Version 1.0.8

Mozilla ≫ Seamonkey Version 1.0.9

Mozilla ≫ Seamonkey Version 1.1

Mozilla ≫ Seamonkey Version 1.1 Update alpha

Mozilla ≫ Seamonkey Version 1.1 Update beta

Mozilla ≫ Seamonkey Version 1.1.1

Mozilla ≫ Seamonkey Version 1.1.2

Mozilla ≫ Seamonkey Version 1.1.3

Mozilla ≫ Seamonkey Version 1.1.4

Mozilla ≫ Seamonkey Version 1.1.5

Mozilla ≫ Seamonkey Version 1.1.6

Mozilla ≫ Seamonkey Version 1.1.7

Mozilla ≫ Seamonkey Version 1.1.8

Mozilla ≫ Seamonkey Version 1.1.9

Mozilla ≫ Seamonkey Version 1.1.10

Mozilla ≫ Seamonkey Version 1.1.11

Mozilla ≫ Seamonkey Version 1.1.12

Mozilla ≫ Seamonkey Version 1.1.13

Mozilla ≫ Seamonkey Version 1.1.14

Mozilla ≫ Seamonkey Version 1.1.15

Mozilla ≫ Seamonkey Version 1.1.16

Mozilla ≫ Seamonkey Version 1.1.17

Mozilla ≫ Seamonkey Version 1.1.18

Mozilla ≫ Seamonkey Version 1.1.19

Mozilla ≫ Seamonkey Version 1.5.0.8

Mozilla ≫ Seamonkey Version 1.5.0.9

Mozilla ≫ Seamonkey Version 1.5.0.10

Mozilla ≫ Seamonkey Version 2.0

Mozilla ≫ Seamonkey Version 2.0 Update alpha_1

Mozilla ≫ Seamonkey Version 2.0 Update alpha_2

Mozilla ≫ Seamonkey Version 2.0 Update alpha_3

Mozilla ≫ Seamonkey Version 2.0 Update beta_1

Mozilla ≫ Seamonkey Version 2.0 Update beta_2

Mozilla ≫ Seamonkey Version 2.0 Update rc1

Mozilla ≫ Seamonkey Version 2.0 Update rc2

Mozilla ≫ Seamonkey Version 2.0.1

Mozilla ≫ Seamonkey Version 2.0.2

Mozilla ≫ Seamonkey Version 2.0.3

Mozilla ≫ Seamonkey Version 2.0.4

Mozilla ≫ Seamonkey Version 2.0.5

Mozilla ≫ Seamonkey Version 2.0.6

Mozilla ≫ Seamonkey Version 2.0.7

Mozilla ≫ Seamonkey Version 2.0.8

Mozilla ≫ Seamonkey Version 2.0.9

Mozilla ≫ Seamonkey Version 2.0.10

Mozilla ≫ Seamonkey Version 2.0.11

Mozilla ≫ Seamonkey Version 2.0.12

Mozilla ≫ Seamonkey Version 2.0.13

Mozilla ≫ Seamonkey Version 2.0.14

Mozilla ≫ Seamonkey Version 2.1

Mozilla ≫ Seamonkey Version 2.1 Update alpha1

Mozilla ≫ Seamonkey Version 2.1 Update alpha2

Mozilla ≫ Seamonkey Version 2.1 Update alpha3

Mozilla ≫ Seamonkey Version 2.1 Update beta1

Mozilla ≫ Seamonkey Version 2.1 Update beta2

Mozilla ≫ Seamonkey Version 2.1 Update beta3

Mozilla ≫ Seamonkey Version 2.1 Update rc1

Mozilla ≫ Seamonkey Version 2.1 Update rc2

Mozilla ≫ Seamonkey Version 2.2

Mozilla ≫ Seamonkey Version 2.2 Update beta1

Mozilla ≫ Seamonkey Version 2.2 Update beta2

Mozilla ≫ Seamonkey Version 2.2 Update beta3

Mozilla ≫ Seamonkey Version 2.3

Mozilla ≫ Seamonkey Version 2.3 Update beta1

Mozilla ≫ Seamonkey Version 2.3 Update beta2

Mozilla ≫ Seamonkey Version 2.3 Update beta3

Mozilla ≫ Seamonkey Version 2.3.1

Mozilla ≫ Seamonkey Version 2.3.2

Mozilla ≫ Seamonkey Version 2.3.3

Mozilla ≫ Seamonkey Version 2.4

Mozilla ≫ Seamonkey Version 2.4 Update beta1

Mozilla ≫ Seamonkey Version 2.4 Update beta2

Mozilla ≫ Seamonkey Version 2.4 Update beta3

Mozilla ≫ Seamonkey Version 2.4.1

Mozilla ≫ Seamonkey Version 2.5

Mozilla ≫ Seamonkey Version 2.5 Update beta1

Mozilla ≫ Seamonkey Version 2.5 Update beta2

Mozilla ≫ Seamonkey Version 2.5 Update beta3

Mozilla ≫ Seamonkey Version 2.5 Update beta4

Mozilla ≫ Seamonkey Version 2.6

Mozilla ≫ Seamonkey Version 2.6 Update beta1

Mozilla ≫ Seamonkey Version 2.6 Update beta2

Mozilla ≫ Seamonkey Version 2.6 Update beta3

Mozilla ≫ Seamonkey Version 2.6 Update beta4

Mozilla ≫ Seamonkey Version 2.6.1

Mozilla ≫ Seamonkey Version 2.7 Update beta1

Mozilla ≫ Seamonkey Version 2.7 Update beta2

Mozilla ≫ Seamonkey Version 2.7 Update beta3

Mozilla ≫ Seamonkey Version 2.7 Update beta4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.01%	0.788

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/49055

http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html

http://secunia.com/advisories/48553

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html

http://rhn.redhat.com/errata/RHSA-2012-0387.html

http://rhn.redhat.com/errata/RHSA-2012-0388.html

http://secunia.com/advisories/48359

http://secunia.com/advisories/48402

http://secunia.com/advisories/48496

http://secunia.com/advisories/48513

http://secunia.com/advisories/48561

http://secunia.com/advisories/48629

http://www.mandriva.com/security/advisories?name=MDVSA-2012:032

http://www.securitytracker.com/id?1026801

http://www.securitytracker.com/id?1026803

http://www.securitytracker.com/id?1026804

http://www.ubuntu.com/usn/USN-1400-1

http://www.ubuntu.com/usn/USN-1400-2

http://www.ubuntu.com/usn/USN-1400-3

http://www.ubuntu.com/usn/USN-1400-4

http://www.ubuntu.com/usn/USN-1400-5

http://www.mozilla.org/security/announce/2012/mfsa2012-18.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=727303

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114

https://nvd.nist.gov/vuln/detail/CVE-2012-0460

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0460

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0460

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-0460