CVE-2012-3977 - ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4930. Reason: This candidate

CVE-2012-3977

Summary

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4930. Reason: This candidate is a duplicate of CVE-2012-4930. Notes: All CVE users should reference CVE-2012-4930 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

References

Vulnerable Configurations

CVSS

Base:	5.0
Impact:
Exploitability:

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

oval via4

accepted

2014-10-06T04:02:18.837-04:00

class

vulnerability

contributors

name Sergey Artykhov
organization ALTX-SOFT
name Evgeniy Pavlov
organization ALTX-SOFT
name Evgeniy Pavlov
organization ALTX-SOFT
name Evgeniy Pavlov
organization ALTX-SOFT

definition_extensions

comment Mozilla Firefox Mainline release is installed
oval oval:org.mitre.oval:def:22259
comment Mozilla Firefox ESR is installed
oval oval:org.mitre.oval:def:22414
comment Mozilla Thunderbird ESR is installed
oval oval:org.mitre.oval:def:22216

description

The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.

family

windows

oval:org.mitre.oval:def:16935

status

accepted

submitted

2013-05-13T10:26:26.748+04:00

title

version

refmap via4

Last major update

09-10-2012 - 11:13

Published

09-10-2012 - 11:13

Last modified

09-10-2012 - 11:13