Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-4192
HistoryOct 12, 2012 - 10:44 a.m.

CVE-2012-4192

2012-10-1210:44:20
CWE-264
[email protected]
web.nvd.nist.gov
40
cve-2012-4192
same origin policy
location object
web security
remote attackers
mozilla firefox
thunderbird
seamonkey

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.8 High

AI Score

Confidence

High

0.084 Low

EPSS

Percentile

94.5%

JSON

Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.

Affected configurations

NVD
Node
mozillafirefoxMatch16.0
OR
mozillaseamonkeyMatch2.13
OR
mozillathunderbirdMatch16.0

Related

nessus 30
openvas 46
ubuntucve 2
cvelist 2
nvd 2
prion 2
mozilla 1
checkpoint_advisories 1
ubuntu 2
oraclelinux 2
veracode 1
centos 2
redhat 2
cve 1
suse 3
freebsd 1
securityvulns 1
ibm 2
gentoo 1
nessus
nessus
Thunderbird 10.x < 10.0.9 Multiple Vulnerabilities (Mac OS X)
2012-10-17 00:00:00
Firefox 10.x < 10.0.9 Multiple Vulnerabilities
2012-10-17 00:00:00
Firefox < 10.0.9 Multiple Vulnerabilities (Mac OS X)
2012-10-17 00:00:00
openvas
openvas
Mozilla Thunderbird Security Bypass Vulnerabilities - Oct 12 (Mac OS X)
2013-07-12 00:00:00
Mozilla Firefox Security Bypass Vulnerabilities (Oct 2012) - Windows
2012-10-15 00:00:00
Mozilla Firefox Security Bypass Vulnerabilities (Oct 2012) - Mac OS X
2012-10-15 00:00:00
ubuntucve
ubuntucve
CVE-2012-4192
2012-10-10 00:00:00
CVE-2012-4193
2012-10-11 00:00:00
cvelist
cvelist
CVE-2012-4192
2012-10-12 10:00:00
CVE-2012-4193
2012-10-12 10:00:00
nvd
nvd
CVE-2012-4192
2012-10-12 10:44:20
CVE-2012-4193
2012-10-12 10:44:20
prion
prion
Design/Logic Flaw
2012-10-12 10:44:00
Design/Logic Flaw
2012-10-12 10:44:00
mozilla
mozilla
defaultValue security checks not applied — Mozilla
2012-10-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Cross Domain Information Disclosure (CVE-2012-4192)
2012-12-16 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2012-10-11 00:00:00
Thunderbird vulnerabilities
2012-10-12 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2012-10-12 00:00:00
xulrunner security update
2012-10-12 00:00:00
veracode
veracode
Same Origin Policy Bypass
2019-01-15 08:58:46
centos
centos
xulrunner security update
2012-10-12 21:47:30
thunderbird security update
2012-10-13 02:05:00
redhat
redhat
(RHSA-2012:1362) Critical: thunderbird security update
2012-10-12 00:00:00
(RHSA-2012:1361) Critical: xulrunner security update
2012-10-12 00:00:00
cve
cve
CVE-2012-4193
2012-10-12 10:44:20
suse
suse
MozillaFirefox: update to Firefox 16.0.1 (important)
2012-10-15 15:08:30
Security update for Mozilla Firefox (important)
2012-10-16 22:08:48
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-10-09 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-10-29 00:00:00
ibm
ibm
Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.8 High

AI Score

Confidence

High

0.084 Low

EPSS

Percentile

94.5%

JSON
Related for CVE-2012-4192
nessus30openvas46ubuntucve2cvelist2nvd2prion2mozilla1checkpoint_advisories1ubuntu2oraclelinux2veracode1centos2redhat2cve1suse3freebsd1securityvulns1ibm2gentoo1