4.3
CVSSv2

CVE-2012-4192

Published: 12/10/2012 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote malicious users to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 16.0

mozilla thunderbird 16.0

mozilla seamonkey 2.13

Vendor Advisories

Several security issues were fixed in Firefox ...
Several security issues were fixed in Thunderbird ...
Mozilla Foundation Security Advisory 2012-89 defaultValue security checks not applied Announced October 11, 2012 Reporter moz_bug_r_a4 Impact Critical Products Firefox, Firefox ESR, SeaMonkey, Thunderbird, Thunderbird ESR ...