Lucene search
PRIOn knowledge basePRION:CVE-2012-3985HistoryOct 10, 2012 - 5:55 p.m.
Cross site scripting
2012-10-1017:55:00
PRIOn knowledge base
www.prio-n.com
4
Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set.
References
lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html
osvdb.org/86106
secunia.com/advisories/50856
secunia.com/advisories/50892
secunia.com/advisories/50904
secunia.com/advisories/50935
secunia.com/advisories/50984
www.mozilla.org/security/announce/2012/mfsa2012-76.html
www.ubuntu.com/usn/USN-1611-1
bugzilla.mozilla.org/show_bug.cgi?id=655649
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16108
Related
cvelist
cvelist
CVE-2012-3985
2012-10-10 17:00:00
ubuntucve
ubuntucve
CVE-2012-3985
2012-10-09 00:00:00
cve
cve
CVE-2012-3985
2012-10-10 17:55:01
nvd
nvd
CVE-2012-3985
2012-10-10 17:55:01
mozilla
mozilla
Continued access to initial origin after setting document.domain — Mozilla
2012-10-09 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-76) - Linux
2021-11-11 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities - Oct 12 (Mac OS X)
2013-07-12 00:00:00
Mozilla Seamonkey Multiple Vulnerabilities (Oct 2012) - Mac OS X
2013-07-12 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2012-10-09 00:00:00
Thunderbird vulnerabilities
2012-10-12 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : firefox vulnerabilities (USN-1600-1)
2012-10-10 00:00:00
Mozilla Thunderbird < 16.0 Multiple Vulnerabilities
2012-10-17 00:00:00
Firefox < 16.0 Multiple Vulnerabilities
2012-10-17 00:00:00
suse
suse
MozillaFirefox: update to Firefox 16.0.1 (important)
2012-10-15 15:08:30
Security update for Mozilla Firefox (important)
2012-10-16 22:08:48
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-10-09 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-10-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00