Lucene search
Mozilla FoundationMFSA2012-95HistoryNov 20, 2012 - 12:00 a.m.
Javascript: URLs run in privileged context on New Tab page — Mozilla
2012-11-2000:00:00
Mozilla Foundation
www.mozilla.org
24
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.055
Percentile
93.3%
Security researcher [email protected] reported that if a javascript: URL is selected from the list of Firefox “new tab” page, the script will inherit the privileges of the privileged “new tab” page. This allows for the execution of locally installed programs if a user can be convinced to save a bookmark of a malicious javascript: URL.
Affected configurations
Node
mozillafirefoxRange<17
Related
seebug
seebug
Mozilla Firefox新标签页特权提升漏洞(CVE-2012-4203)
2012-11-23 00:00:00
cve
cve
CVE-2012-4203
2012-11-21 12:55:01
nvd
nvd
CVE-2012-4203
2012-11-21 12:55:01
prion
prion
Code injection
2012-11-21 12:55:00
cvelist
cvelist
CVE-2012-4203
2012-11-21 11:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-95) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)
2012-11-26 00:00:00
Mozilla Firefox Multiple Vulnerabilities (Nov 2012) - Windows
2012-11-26 00:00:00
ubuntucve
ubuntucve
CVE-2012-4203
2012-11-21 00:00:00
ubuntu
ubuntu
ubufox update
2012-11-21 00:00:00
Firefox vulnerabilities
2012-11-21 00:00:00
Firefox regressions
2012-12-03 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : ubufox update (USN-1638-2)
2012-11-23 00:00:00
Firefox < 17.0 Multiple Vulnerabilities (Mac OS X)
2012-11-21 00:00:00
openSUSE Security Update : xulrunner (openSUSE-SU-2012:1586-1)
2014-06-13 00:00:00
suse
suse
security update to Firefox 17.0 and other Mozilla based packages (important)
2013-01-23 14:07:31
Security update for Mozilla Firefox (important)
2012-11-29 01:08:52
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-12-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-11-20 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.055
Percentile
93.3%
Related for MFSA2012-95