4.3

CVE-2012-3986

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 10.0.8
Mozilla ≫ Thunderbird Esr Version < 10.0.8
Mozilla ≫ Firefox Version < 16.0
Mozilla ≫ Thunderbird Version < 16.0
Mozilla ≫ Seamonkey Version < 2.13
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 11.04
Canonical ≫ Ubuntu Linux Version 11.10
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Redhat ≫ Enterprise Linux Eus Version 6.3
Debian ≫ Debian Linux Version 6.0
Suse ≫ Linux Enterprise Desktop Version 10 Update sp4
Suse ≫ Linux Enterprise Desktop Version 11 Update sp3
Suse ≫ Linux Enterprise Sdk Version 10 Update sp4
Suse ≫ Linux Enterprise Server Version 10 Update sp4
Suse ≫ Linux Enterprise Server Version 11 Update sp3
Suse ≫ Linux Enterprise Server Version 11 Update sp3 SwPlatform vmware
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.51% 0.827
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://rhn.redhat.com/errata/RHSA-2012-1351.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/50856
Third Party Advisory
http://secunia.com/advisories/50892
Third Party Advisory
http://secunia.com/advisories/50904
Third Party Advisory
http://secunia.com/advisories/50935
Third Party Advisory
http://secunia.com/advisories/50936
Third Party Advisory
http://secunia.com/advisories/50984
Third Party Advisory
http://secunia.com/advisories/51181
Third Party Advisory
http://secunia.com/advisories/55318
Third Party Advisory
http://www.debian.org/security/2012/dsa-2565
Third Party Advisory
http://www.debian.org/security/2012/dsa-2569
Third Party Advisory
http://www.debian.org/security/2012/dsa-2572
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163
Third Party Advisory
http://www.ubuntu.com/usn/USN-1611-1
Third Party Advisory
http://www.mozilla.org/security/announce/2012/mfsa2012-77.html
Vendor Advisory
http://www.securityfocus.com/bid/55922
Third Party Advisory
VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=775868
Vendor Advisory
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16834
Third Party Advisory