Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0455
HistoryMar 14, 2012 - 12:00 a.m.

CVE-2012-0455

2012-03-1400:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

71.5%

JSON

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before
10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR
10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict
drag-and-drop operations on javascript: URLs, which allows user-assisted
remote attackers to conduct cross-site scripting (XSS) attacks via a
crafted web page, related to a “DragAndDropJacking” issue.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 11.0+build1-0ubuntu0.10.04.2UNKNOWN
ubuntu10.10noarchfirefox< 11.0+build1-0ubuntu0.10.10.2UNKNOWN
ubuntu11.04noarchfirefox< 11.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 11.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird< 3.1.20+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchthunderbird< 11.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2< 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2< 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
Rows per page:
1-10 of 111

Related

cvelist 1
mozilla 1
nvd 1
prion 1
veracode 1
openvas 49
cve 1
nessus 46
debian 3
osv 3
ubuntu 7
suse 3
oraclelinux 2
centos 2
redhat 2
freebsd 1
securityvulns 1
gentoo 1
cvelist
cvelist
CVE-2012-0455
2012-03-14 19:00:00
mozilla
mozilla
XSS with Drag and Drop and Javascript: URL — Mozilla
2012-03-13 00:00:00
nvd
nvd
CVE-2012-0455
2012-03-14 19:55:01
prion
prion
Cross site scripting
2012-03-14 19:55:00
veracode
veracode
Cross-site Scripting (XSS)
2020-04-10 01:07:54
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-13) - Linux
2021-11-16 00:00:00
Debian Security Advisory DSA 2433-1 (iceweasel)
2012-04-30 00:00:00
Debian: Security Advisory (DSA-2437-1)
2012-04-30 00:00:00
cve
cve
CVE-2012-0455
2012-03-14 19:55:01
nessus
nessus
Debian DSA-2437-1 : icedove - several vulnerabilities
2012-03-22 00:00:00
Debian DSA-2433-1 : iceweasel - several vulnerabilities
2012-03-16 00:00:00
Firefox 3.6.x < 3.6.28 Multiple Vulnerabilities (Mac OS X)
2012-03-15 00:00:00
debian
debian
[SECURITY] [DSA 2437-1] icedove security update
2012-03-21 18:58:26
[SECURITY] [DSA 2433-1] iceweasel security update
2012-03-15 21:42:10
[SECURITY] [DSA 2548-1] iceape security update
2012-04-24 20:56:27
osv
osv
iceweasel - several
2012-03-15 00:00:00
icedove - several
2012-03-21 00:00:00
iceape - several
2012-05-13 00:00:00
ubuntu
ubuntu
Xulrunner vulnerabilities
2012-03-19 00:00:00
Thunderbird vulnerabilities
2012-03-23 00:00:00
Firefox vulnerabilities
2012-03-16 00:00:00
suse
suse
Security update for Mozilla Firefox (critical)
2012-03-29 06:08:20
Security update for Mozilla Firefox (critical)
2012-03-28 21:08:31
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
oraclelinux
oraclelinux
firefox security and bug fix update
2012-03-14 00:00:00
thunderbird security update
2012-03-14 00:00:00
centos
centos
thunderbird security update
2012-03-14 11:41:24
firefox, xulrunner security update
2012-03-14 11:23:06
redhat
redhat
(RHSA-2012:0388) Critical: thunderbird security update
2012-03-14 00:00:00
(RHSA-2012:0387) Critical: firefox security and bug fix update
2012-03-14 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-03-13 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-03-17 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

71.5%

JSON
Related for UB:CVE-2012-0455
cvelist1mozilla1nvd1prion1veracode1openvas49cve1nessus46debian3osv3ubuntu7suse3oraclelinux2centos2redhat2freebsd1securityvulns1gentoo1