Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2012-3993

Published: 10/10/2012 Updated: 13/08/2020
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Firefox Esr

Vulnerability Summary

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox prior to 16.0, Firefox ESR 10.x prior to 10.0.8, Thunderbird prior to 16.0, Thunderbird ESR 10.x prior to 10.0.8, and SeaMonkey prior to 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote malicious users to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox esr 10.0

mozilla firefox esr 10.0.1

mozilla firefox esr 10.0.2

mozilla firefox esr 10.0.3

mozilla firefox esr 10.0.4

mozilla firefox esr 10.0.5

mozilla firefox esr 10.0.6

mozilla firefox esr 10.0.7

mozilla thunderbird esr 10.0

mozilla thunderbird esr 10.0.1

mozilla thunderbird esr 10.0.2

mozilla thunderbird esr 10.0.3

mozilla thunderbird esr 10.0.4

mozilla thunderbird esr 10.0.5

mozilla thunderbird esr 10.0.6

mozilla thunderbird esr 10.0.7

mozilla firefox 1.0

mozilla firefox 1.0.1

mozilla firefox 1.0.2

mozilla firefox 1.0.3

mozilla firefox 1.0.4

mozilla firefox 1.0.5

mozilla firefox 1.0.6

mozilla firefox 1.0.7

mozilla firefox 1.0.8

mozilla firefox 1.4.1

mozilla firefox 1.5

mozilla firefox 1.5.0.1

mozilla firefox 1.5.0.2

mozilla firefox 1.5.0.3

mozilla firefox 1.5.0.4

mozilla firefox 1.5.0.5

mozilla firefox 1.5.0.6

mozilla firefox 1.5.0.7

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.9

mozilla firefox 1.5.0.10

mozilla firefox 1.5.0.11

mozilla firefox 1.5.0.12

mozilla firefox 1.5.1

mozilla firefox 1.5.2

mozilla firefox 1.5.3

mozilla firefox 1.5.4

mozilla firefox 1.5.5

mozilla firefox 1.5.6

mozilla firefox 1.5.7

mozilla firefox 1.5.8

mozilla firefox 1.8

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 2.0.0.2

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.4

mozilla firefox 2.0.0.5

mozilla firefox 2.0.0.6

mozilla firefox 2.0.0.7

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.10

mozilla firefox 2.0.0.11

mozilla firefox 2.0.0.12

mozilla firefox 2.0.0.13

mozilla firefox 2.0.0.14

mozilla firefox 2.0.0.15

mozilla firefox 2.0.0.16

mozilla firefox 2.0.0.17

mozilla firefox 2.0.0.18

mozilla firefox 2.0.0.19

mozilla firefox 2.0.0.20

mozilla firefox 3.0

mozilla firefox 3.0.1

mozilla firefox 3.0.2

mozilla firefox 3.0.3

mozilla firefox 3.0.4

mozilla firefox 3.0.5

mozilla firefox 3.0.6

mozilla firefox 3.0.7

mozilla firefox 3.0.8

mozilla firefox 3.0.9

mozilla firefox 3.0.10

mozilla firefox 3.0.11

mozilla firefox 3.0.12

mozilla firefox 3.0.13

mozilla firefox 3.0.14

mozilla firefox 3.0.15

mozilla firefox 3.0.16

mozilla firefox 3.0.17

mozilla firefox 3.5

mozilla firefox 3.5.1

mozilla firefox 3.5.2

mozilla firefox 3.5.3

mozilla firefox 3.5.4

mozilla firefox 3.5.5

mozilla firefox 3.5.6

mozilla firefox 3.5.7

mozilla firefox 3.5.8

mozilla firefox 3.5.9

mozilla firefox 3.5.10

mozilla firefox 3.5.11

mozilla firefox 3.5.12

mozilla firefox 3.5.13

mozilla firefox 3.5.14

mozilla firefox 3.5.15

mozilla firefox 3.6

mozilla firefox 3.6.2

mozilla firefox 3.6.3

mozilla firefox 3.6.4

mozilla firefox 3.6.6

mozilla firefox 3.6.7

mozilla firefox 3.6.8

mozilla firefox 3.6.9

mozilla firefox 3.6.10

mozilla firefox 3.6.11

mozilla firefox 3.6.12

mozilla firefox 3.6.13

mozilla firefox 3.6.14

mozilla firefox 3.6.15

mozilla firefox 3.6.16

mozilla firefox 3.6.17

mozilla firefox 3.6.18

mozilla firefox 3.6.19

mozilla firefox 3.6.20

mozilla firefox 3.6.21

mozilla firefox 3.6.22

mozilla firefox 3.6.23

mozilla firefox 3.6.24

mozilla firefox 3.6.25

mozilla firefox 4.0

mozilla firefox 4.0.1

mozilla firefox 5.0

mozilla firefox 5.0.1

mozilla firefox 6.0

mozilla firefox 6.0.1

mozilla firefox 6.0.2

mozilla firefox 7.0

mozilla firefox 7.0.1

mozilla firefox 8.0

mozilla firefox 8.0.1

mozilla firefox 9.0

mozilla firefox 9.0.1

mozilla firefox 10.0

mozilla firefox 10.0.1

mozilla firefox 10.0.2

mozilla firefox 11.0

mozilla firefox 12.0

mozilla firefox 13.0

mozilla firefox 13.0.1

mozilla firefox 14.0

mozilla firefox 14.0.1

mozilla firefox 15.0

mozilla firefox

mozilla thunderbird 1.0

mozilla thunderbird 1.0.1

mozilla thunderbird 1.0.2

mozilla thunderbird 1.0.3

mozilla thunderbird 1.0.4

mozilla thunderbird 1.0.5

mozilla thunderbird 1.0.6

mozilla thunderbird 1.0.7

mozilla thunderbird 1.0.8

mozilla thunderbird 1.5

mozilla thunderbird 1.5.0.1

mozilla thunderbird 1.5.0.2

mozilla thunderbird 1.5.0.3

mozilla thunderbird 1.5.0.4

mozilla thunderbird 1.5.0.5

mozilla thunderbird 1.5.0.6

mozilla thunderbird 1.5.0.7

mozilla thunderbird 1.5.0.8

mozilla thunderbird 1.5.0.9

mozilla thunderbird 1.5.0.10

mozilla thunderbird 1.5.0.11

mozilla thunderbird 1.5.0.12

mozilla thunderbird 1.5.0.13

mozilla thunderbird 1.5.0.14

mozilla thunderbird 1.5.1

mozilla thunderbird 1.5.2

mozilla thunderbird 1.7.1

mozilla thunderbird 1.7.3

mozilla thunderbird 2.0

mozilla thunderbird 2.0.0.0

mozilla thunderbird 2.0.0.1

mozilla thunderbird 2.0.0.2

mozilla thunderbird 2.0.0.3

mozilla thunderbird 2.0.0.4

mozilla thunderbird 2.0.0.5

mozilla thunderbird 2.0.0.6

mozilla thunderbird 2.0.0.7

mozilla thunderbird 2.0.0.8

mozilla thunderbird 2.0.0.9

mozilla thunderbird 2.0.0.11

mozilla thunderbird 2.0.0.12

mozilla thunderbird 2.0.0.13

mozilla thunderbird 2.0.0.14

mozilla thunderbird 2.0.0.15

mozilla thunderbird 2.0.0.16

mozilla thunderbird 2.0.0.17

mozilla thunderbird 2.0.0.18

mozilla thunderbird 2.0.0.19

mozilla thunderbird 2.0.0.20

mozilla thunderbird 2.0.0.21

mozilla thunderbird 2.0.0.22

mozilla thunderbird 2.0.0.23

mozilla thunderbird 3.0

mozilla thunderbird 3.0.1

mozilla thunderbird 3.0.2

mozilla thunderbird 3.0.3

mozilla thunderbird 3.0.4

mozilla thunderbird 3.0.5

mozilla thunderbird 3.0.6

mozilla thunderbird 3.0.7

mozilla thunderbird 3.0.8

mozilla thunderbird 3.0.9

mozilla thunderbird 3.0.10

mozilla thunderbird 3.0.11

mozilla thunderbird 3.1

mozilla thunderbird 3.1.1

mozilla thunderbird 3.1.2

mozilla thunderbird 3.1.3

mozilla thunderbird 3.1.4

mozilla thunderbird 3.1.5

mozilla thunderbird 3.1.6

mozilla thunderbird 3.1.7

mozilla thunderbird 3.1.8

mozilla thunderbird 3.1.9

mozilla thunderbird 3.1.10

mozilla thunderbird 3.1.11

mozilla thunderbird 3.1.12

mozilla thunderbird 3.1.13

mozilla thunderbird 3.1.14

mozilla thunderbird 3.1.15

mozilla thunderbird 3.1.16

mozilla thunderbird 3.1.17

mozilla thunderbird 5.0

mozilla thunderbird 6.0

mozilla thunderbird 6.0.1

mozilla thunderbird 6.0.2

mozilla thunderbird 7.0

mozilla thunderbird 7.0.1

mozilla thunderbird 8.0

mozilla thunderbird 9.0

mozilla thunderbird 9.0.1

mozilla thunderbird 10.0

mozilla thunderbird 10.0.1

mozilla thunderbird 10.0.2

mozilla thunderbird 10.0.3

mozilla thunderbird 10.0.4

mozilla thunderbird 11.0

mozilla thunderbird 11.0.1

mozilla thunderbird 12.0

mozilla thunderbird 12.0.1

mozilla thunderbird 13.0

mozilla thunderbird 13.0.1

mozilla thunderbird 14.0

mozilla thunderbird 15.0

mozilla thunderbird

mozilla seamonkey 2.0

mozilla seamonkey 2.0.1

mozilla seamonkey 2.0.2

mozilla seamonkey 2.0.3

mozilla seamonkey 2.0.4

mozilla seamonkey 2.0.5

mozilla seamonkey 2.0.6

mozilla seamonkey 2.0.7

mozilla seamonkey 2.0.8

mozilla seamonkey 2.0.9

mozilla seamonkey 2.0.10

mozilla seamonkey 2.0.11

mozilla seamonkey 2.0.12

mozilla seamonkey 2.0.13

mozilla seamonkey 2.0.14

mozilla seamonkey 2.1

mozilla seamonkey 2.2

mozilla seamonkey 2.3

mozilla seamonkey 2.3.1

mozilla seamonkey 2.3.2

mozilla seamonkey 2.3.3

mozilla seamonkey 2.4

mozilla seamonkey 2.4.1

mozilla seamonkey 2.5

mozilla seamonkey 2.6

mozilla seamonkey 2.6.1

mozilla seamonkey 2.7

mozilla seamonkey 2.7.1

mozilla seamonkey 2.7.2

mozilla seamonkey 2.8

mozilla seamonkey 2.9

mozilla seamonkey 2.9.1

mozilla seamonkey 2.10

mozilla seamonkey 2.10.1

mozilla seamonkey 2.11

mozilla seamonkey 2.12

mozilla seamonkey 2.12.1

mozilla seamonkey 2.13

mozilla seamonkey

Vendor Advisories

Red Hat: Critical: thunderbird security update
Synopsis Critical: thunderbird security update Type/Severity Security Advisory: Critical Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact Co ...
Red Hat: Critical: firefox security and bug fix update
Synopsis Critical: firefox security and bug fix update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix several security issues and one bug arenow available for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecuri ...
Ubuntu Security Notice: firefox vulnerabilities
Multiple security issues were fixed in Firefox ...
Ubuntu Security Notice: thunderbird vulnerabilities
Several security issues were fixed in Thunderbird ...
Mozilla: Chrome Object Wrapper (COW) does not disallow access to privileged functions or properties
Mozilla Foundation Security Advisory 2012-83 Chrome Object Wrapper (COW) does not disallow access to privileged functions or properties Announced October 9, 2012 Reporter Mariusz Mlynski Impact Critical Products Firefox, Fir ...

Exploits

Exploit DB: Mozilla Firefox 5.0 < 15.0.1 - __exposedProps__ XCS Code Execution (Metasploit)
## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class MetasploitModule &lt; Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::BrowserExploitServer include Msf::Exploit::Remote::BrowserAutopwn include Msf::E ...
Exploit DB: Firefox 15.0.1 Code Execution
On versions of Firefox from 50 to 1501, the InstallTrigger global, when given invalid input, would throw an exception that did not have an __exposedProps__ property set By re-setting this property on the exception object's prototype, the chrome-based defineProperty method is made available With the defineProperty method, functions belonging to ...

References

CWE-269https://bugzilla.mozilla.org/show_bug.cgi?id=768101http://www.mozilla.org/security/announce/2012/mfsa2012-83.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1351.htmlhttp://www.ubuntu.com/usn/USN-1611-1http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.htmlhttp://www.securityfocus.com/bid/56119http://osvdb.org/86111http://www.mandriva.com/security/advisories?name=MDVSA-2012:163http://secunia.com/advisories/50936http://secunia.com/advisories/50935http://secunia.com/advisories/50856http://secunia.com/advisories/50984http://secunia.com/advisories/50904http://secunia.com/advisories/50892http://secunia.com/advisories/55318https://exchange.xforce.ibmcloud.com/vulnerabilities/79153https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16718https://access.redhat.com/errata/RHSA-2012:1351https://nvd.nist.govhttps://usn.ubuntu.com/1600-1/https://www.exploit-db.com/exploits/30474/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook