9.3
CVE-2012-3993
- EPSS 42.61%
- Veröffentlicht 10.10.2012 17:55:02
- Zuletzt bearbeitet 16.06.2026 23:44:13
- Erkennungen
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird Esr Version 10.0
Mozilla ≫ Thunderbird Esr Version 10.0.1
Mozilla ≫ Thunderbird Esr Version 10.0.2
Mozilla ≫ Thunderbird Esr Version 10.0.3
Mozilla ≫ Thunderbird Esr Version 10.0.4
Mozilla ≫ Thunderbird Esr Version 10.0.5
Mozilla ≫ Thunderbird Esr Version 10.0.6
Mozilla ≫ Thunderbird Esr Version 10.0.7
Mozilla ≫ Thunderbird Version <= 15.0.1
Mozilla ≫ Thunderbird Version 1.0
Mozilla ≫ Thunderbird Version 1.0.1
Mozilla ≫ Thunderbird Version 1.0.2
Mozilla ≫ Thunderbird Version 1.0.3
Mozilla ≫ Thunderbird Version 1.0.4
Mozilla ≫ Thunderbird Version 1.0.5
Mozilla ≫ Thunderbird Version 1.0.5 Update beta
Mozilla ≫ Thunderbird Version 1.0.6
Mozilla ≫ Thunderbird Version 1.0.7
Mozilla ≫ Thunderbird Version 1.0.8
Mozilla ≫ Thunderbird Version 1.5
Mozilla ≫ Thunderbird Version 1.5 Update beta2
Mozilla ≫ Thunderbird Version 1.5.0.1
Mozilla ≫ Thunderbird Version 1.5.0.2
Mozilla ≫ Thunderbird Version 1.5.0.3
Mozilla ≫ Thunderbird Version 1.5.0.4
Mozilla ≫ Thunderbird Version 1.5.0.5
Mozilla ≫ Thunderbird Version 1.5.0.6
Mozilla ≫ Thunderbird Version 1.5.0.7
Mozilla ≫ Thunderbird Version 1.5.0.8
Mozilla ≫ Thunderbird Version 1.5.0.9
Mozilla ≫ Thunderbird Version 1.5.0.10
Mozilla ≫ Thunderbird Version 1.5.0.11
Mozilla ≫ Thunderbird Version 1.5.0.12
Mozilla ≫ Thunderbird Version 1.5.0.13
Mozilla ≫ Thunderbird Version 1.5.0.14
Mozilla ≫ Thunderbird Version 1.5.1
Mozilla ≫ Thunderbird Version 1.5.2
Mozilla ≫ Thunderbird Version 1.7.1
Mozilla ≫ Thunderbird Version 1.7.3
Mozilla ≫ Thunderbird Version 2.0
Mozilla ≫ Thunderbird Version 2.0.0.0
Mozilla ≫ Thunderbird Version 2.0.0.1
Mozilla ≫ Thunderbird Version 2.0.0.2
Mozilla ≫ Thunderbird Version 2.0.0.3
Mozilla ≫ Thunderbird Version 2.0.0.4
Mozilla ≫ Thunderbird Version 2.0.0.5
Mozilla ≫ Thunderbird Version 2.0.0.6
Mozilla ≫ Thunderbird Version 2.0.0.7
Mozilla ≫ Thunderbird Version 2.0.0.8
Mozilla ≫ Thunderbird Version 2.0.0.9
Mozilla ≫ Thunderbird Version 2.0.0.11
Mozilla ≫ Thunderbird Version 2.0.0.12
Mozilla ≫ Thunderbird Version 2.0.0.13
Mozilla ≫ Thunderbird Version 2.0.0.14
Mozilla ≫ Thunderbird Version 2.0.0.15
Mozilla ≫ Thunderbird Version 2.0.0.16
Mozilla ≫ Thunderbird Version 2.0.0.17
Mozilla ≫ Thunderbird Version 2.0.0.18
Mozilla ≫ Thunderbird Version 2.0.0.19
Mozilla ≫ Thunderbird Version 2.0.0.20
Mozilla ≫ Thunderbird Version 2.0.0.21
Mozilla ≫ Thunderbird Version 2.0.0.22
Mozilla ≫ Thunderbird Version 2.0.0.23
Mozilla ≫ Thunderbird Version 3.0
Mozilla ≫ Thunderbird Version 3.0.1
Mozilla ≫ Thunderbird Version 3.0.2
Mozilla ≫ Thunderbird Version 3.0.3
Mozilla ≫ Thunderbird Version 3.0.4
Mozilla ≫ Thunderbird Version 3.0.5
Mozilla ≫ Thunderbird Version 3.0.6
Mozilla ≫ Thunderbird Version 3.0.7
Mozilla ≫ Thunderbird Version 3.0.8
Mozilla ≫ Thunderbird Version 3.0.9
Mozilla ≫ Thunderbird Version 3.0.10
Mozilla ≫ Thunderbird Version 3.0.11
Mozilla ≫ Thunderbird Version 3.1
Mozilla ≫ Thunderbird Version 3.1.1
Mozilla ≫ Thunderbird Version 3.1.2
Mozilla ≫ Thunderbird Version 3.1.3
Mozilla ≫ Thunderbird Version 3.1.4
Mozilla ≫ Thunderbird Version 3.1.5
Mozilla ≫ Thunderbird Version 3.1.6
Mozilla ≫ Thunderbird Version 3.1.7
Mozilla ≫ Thunderbird Version 3.1.8
Mozilla ≫ Thunderbird Version 3.1.9
Mozilla ≫ Thunderbird Version 3.1.10
Mozilla ≫ Thunderbird Version 3.1.11
Mozilla ≫ Thunderbird Version 3.1.12
Mozilla ≫ Thunderbird Version 3.1.13
Mozilla ≫ Thunderbird Version 3.1.14
Mozilla ≫ Thunderbird Version 3.1.15
Mozilla ≫ Thunderbird Version 3.1.16
Mozilla ≫ Thunderbird Version 3.1.17
Mozilla ≫ Thunderbird Version 5.0
Mozilla ≫ Thunderbird Version 6.0
Mozilla ≫ Thunderbird Version 6.0.1
Mozilla ≫ Thunderbird Version 6.0.2
Mozilla ≫ Thunderbird Version 7.0
Mozilla ≫ Thunderbird Version 7.0.1
Mozilla ≫ Thunderbird Version 8.0
Mozilla ≫ Thunderbird Version 9.0
Mozilla ≫ Thunderbird Version 9.0.1
Mozilla ≫ Thunderbird Version 10.0
Mozilla ≫ Thunderbird Version 10.0.1
Mozilla ≫ Thunderbird Version 10.0.2
Mozilla ≫ Thunderbird Version 10.0.3
Mozilla ≫ Thunderbird Version 10.0.4
Mozilla ≫ Thunderbird Version 11.0
Mozilla ≫ Thunderbird Version 11.0.1
Mozilla ≫ Thunderbird Version 12.0
Mozilla ≫ Thunderbird Version 12.0.1
Mozilla ≫ Thunderbird Version 13.0
Mozilla ≫ Thunderbird Version 13.0.1
Mozilla ≫ Thunderbird Version 14.0
Mozilla ≫ Thunderbird Version 15.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 42.61% | 0.985 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
http://rhn.redhat.com/errata/RHSA-2012-1351.html
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
http://secunia.com/advisories/50856
http://secunia.com/advisories/50892
http://secunia.com/advisories/50904
http://secunia.com/advisories/50935
http://secunia.com/advisories/50936
http://secunia.com/advisories/50984
http://secunia.com/advisories/55318
http://www.mandriva.com/security/advisories?name=MDVSA-2012:163
http://www.ubuntu.com/usn/USN-1611-1
http://osvdb.org/86111
http://www.mozilla.org/security/announce/2012/mfsa2012-83.html
http://www.securityfocus.com/bid/56119
https://bugzilla.mozilla.org/show_bug.cgi?id=768101
https://exchange.xforce.ibmcloud.com/vulnerabilities/79153
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718