Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11223
HistoryJan 15, 2019 - 8:58 a.m.

Same Origin Policy Bypass

2019-01-1508:58:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.023 Low

EPSS

Percentile

89.6%

JSON

xulrunner is vulnerable to same origin policy bypass attacks. It omits a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.

Related

nessus 29
openvas 44
oraclelinux 2
redhat 2
cve 2
prion 2
centos 2
nvd 2
ubuntucve 2
cvelist 2
mozilla 1
ubuntu 1
suse 3
freebsd 1
securityvulns 1
ibm 2
gentoo 1
nessus
nessus
Oracle Linux 6 : thunderbird (ELSA-2012-1362)
2013-07-12 00:00:00
CentOS 5 / 6 : xulrunner (CESA-2012:1361)
2012-10-15 00:00:00
RHEL 5 / 6 : thunderbird (RHSA-2012:1362)
2012-10-15 00:00:00
openvas
openvas
CentOS Update for thunderbird CESA-2012:1362 centos6
2012-10-16 00:00:00
RedHat Update for thunderbird RHSA-2012:1362-01
2012-10-16 00:00:00
Oracle: Security Advisory (ELSA-2012-1362)
2015-10-06 00:00:00
oraclelinux
oraclelinux
xulrunner security update
2012-10-12 00:00:00
thunderbird security update
2012-10-12 00:00:00
redhat
redhat
(RHSA-2012:1362) Critical: thunderbird security update
2012-10-12 00:00:00
(RHSA-2012:1361) Critical: xulrunner security update
2012-10-12 00:00:00
cve
cve
CVE-2012-4193
2012-10-12 10:44:20
CVE-2012-4192
2012-10-12 10:44:20
prion
prion
Design/Logic Flaw
2012-10-12 10:44:00
Design/Logic Flaw
2012-10-12 10:44:00
centos
centos
xulrunner security update
2012-10-12 21:47:30
thunderbird security update
2012-10-13 02:05:00
nvd
nvd
CVE-2012-4193
2012-10-12 10:44:20
CVE-2012-4192
2012-10-12 10:44:20
ubuntucve
ubuntucve
CVE-2012-4193
2012-10-11 00:00:00
CVE-2012-4192
2012-10-10 00:00:00
cvelist
cvelist
CVE-2012-4193
2012-10-12 10:00:00
CVE-2012-4192
2012-10-12 10:00:00
mozilla
mozilla
defaultValue security checks not applied — Mozilla
2012-10-11 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-10-12 00:00:00
suse
suse
MozillaFirefox: update to Firefox 16.0.1 (important)
2012-10-15 15:08:30
Security update for Mozilla Firefox (important)
2012-10-16 22:08:48
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-10-09 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-10-29 00:00:00
ibm
ibm
Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

0.023 Low

EPSS

Percentile

89.6%

JSON
Related for VERACODE:11223
nessus29openvas44oraclelinux2redhat2cve2prion2centos2nvd2ubuntucve2cvelist2mozilla1ubuntu1suse3freebsd1securityvulns1ibm2gentoo1