9.3

CVE-2012-3991

EPSS 1.42%
Published 10.10.2012 17:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.

Affected products Warnungen 0 Metrics 2 CWE 0 References 23

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 10.0.8

Mozilla ≫ Thunderbird Esr Version < 10.0.8

Mozilla ≫ Firefox Version < 16.0

Mozilla ≫ Thunderbird Version < 16.0

Mozilla ≫ Seamonkey Version < 2.13

Canonical ≫ Ubuntu Linux Version10.04 SwEdition-

Canonical ≫ Ubuntu Linux Version11.04

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm

Redhat ≫ Enterprise Linux Desktop Version5.0

Redhat ≫ Enterprise Linux Desktop Version6.0

Redhat ≫ Enterprise Linux Eus Version6.3

Redhat ≫ Enterprise Linux Server Version5.0

Redhat ≫ Enterprise Linux Server Version6.0

Redhat ≫ Enterprise Linux Workstation Version5.0

Redhat ≫ Enterprise Linux Workstation Version6.0

Suse ≫ Linux Enterprise Desktop Version10 Updatesp4

Suse ≫ Linux Enterprise Desktop Version11 Updatesp3

Suse ≫ Linux Enterprise Sdk Version10 Updatesp4

Suse ≫ Linux Enterprise Server Version10 Updatesp4

Suse ≫ Linux Enterprise Server Version11 Updatesp3

Suse ≫ Linux Enterprise Server Version11 Updatesp3 SwPlatformvmware

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.42%	0.799

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://rhn.redhat.com/errata/RHSA-2012-1351.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html

Third Party Advisory

Mailing List

http://secunia.com/advisories/50856

Third Party Advisory

http://secunia.com/advisories/50892

Third Party Advisory

http://secunia.com/advisories/50904

Third Party Advisory

http://secunia.com/advisories/50935

Third Party Advisory

http://secunia.com/advisories/50936

Third Party Advisory

http://secunia.com/advisories/50984

Third Party Advisory

http://secunia.com/advisories/51181

Third Party Advisory

http://secunia.com/advisories/55318

Third Party Advisory

http://www.debian.org/security/2012/dsa-2565

Third Party Advisory

http://www.debian.org/security/2012/dsa-2569

Third Party Advisory

http://www.debian.org/security/2012/dsa-2572

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:163

Third Party Advisory

http://www.ubuntu.com/usn/USN-1611-1

Third Party Advisory

http://osvdb.org/86098

Broken Link

http://www.mozilla.org/security/announce/2012/mfsa2012-81.html

Vendor Advisory

http://www.securityfocus.com/bid/55930

Third Party Advisory

VDB Entry

https://bugzilla.mozilla.org/show_bug.cgi?id=783260

Vendor Advisory

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16646

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2012-3991

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3991

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3991

EUVD