4.3
CVSSv2

CVE-2012-5841

Published: 21/11/2012 Updated: 06/08/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Mozilla Firefox prior to 17.0, Firefox ESR 10.x prior to 10.0.11, Thunderbird prior to 17.0, Thunderbird ESR 10.x prior to 10.0.11, and SeaMonkey prior to 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via a crafted web site.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox

mozilla firefox esr

mozilla seamonkey

mozilla thunderbird

mozilla thunderbird esr

opensuse opensuse 11.4

opensuse opensuse 12.1

opensuse opensuse 12.2

suse linux enterprise desktop 10

suse linux enterprise desktop 11

suse linux enterprise server 10

suse linux enterprise server 11

suse linux enterprise software development kit 10

suse linux enterprise software development kit 11

canonical ubuntu linux 10.04

canonical ubuntu linux 11.10

canonical ubuntu linux 12.04

canonical ubuntu linux 12.10

redhat enterprise linux desktop 5.0

redhat enterprise linux desktop 6.0

redhat enterprise linux eus 6.3

redhat enterprise linux server 5.0

redhat enterprise linux server 6.0

redhat enterprise linux workstation 5.0

redhat enterprise linux workstation 6.0

Vendor Advisories

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix several security issues are now availablefor Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulner ...
Synopsis Critical: thunderbird security update Type/Severity Security Advisory: Critical Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact Co ...
This update provides compatible ubufox packages for the latest Firefox ...
Several security issues were fixed in Firefox ...
Regressions were introduced in the last Firefox update ...
Multiple security issues were fixed in Thunderbird ...
Mozilla Foundation Security Advisory 2012-100 Improper security filtering for cross-origin wrappers Announced November 20, 2012 Reporter Bobby Holley Impact High Products Firefox, Firefox ESR, SeaMonkey, Thunderbird, Thunderb ...