CVEvulnerability
CVE-2012-0479
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-04-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
• mozilla firefox 5.0
• mozilla firefox 5.0.1
• mozilla firefox 6.0
• mozilla firefox 6.0.1
• mozilla firefox 6.0.2
• mozilla firefox 7.0
• mozilla firefox 7.0.1
• mozilla firefox 8.0
• mozilla firefox 8.0.1
• mozilla firefox 9.0
• mozilla firefox 9.0.1
• mozilla firefox 10.0
• mozilla firefox 10.0.1
• mozilla firefox 10.0.2
• mozilla firefox 11.0
• mozilla firefox 10.0.3
• mozilla thunderbird 5.0
• mozilla thunderbird 6.0
• mozilla thunderbird 6.0.1
• mozilla thunderbird 6.0.2
• mozilla thunderbird 7.0
• mozilla thunderbird 7.0.1
• mozilla thunderbird 8.0
• mozilla thunderbird 9.0
• mozilla thunderbird 9.0.1
• mozilla thunderbird 10.0
• mozilla thunderbird 10.0.1
• mozilla thunderbird 10.0.2
• mozilla thunderbird 10.0.3
• mozilla thunderbird 10.0.4
• mozilla thunderbird 11.0
• mozilla thunderbird esr 10.0
• mozilla thunderbird esr 10.0.1
• mozilla thunderbird esr 10.0.2
• mozilla thunderbird esr 10.0.3
• mozilla seamonkey (<= 2.9)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
… and 42 more
References
- http://secunia.com/advisories/48920 secunia.com
- http://secunia.com/advisories/48922 secunia.com
- http://secunia.com/advisories/48972 secunia.com
- http://secunia.com/advisories/49047 secunia.com
- http://secunia.com/advisories/49055 secunia.com
- http://www.debian.org/security/2012/dsa-2457 www.debian.org
- http://www.debian.org/security/2012/dsa-2458 www.debian.org
- http://www.debian.org/security/2012/dsa-2464 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-33.html www.mozilla.org
- http://www.securityfocus.com/bid/53224 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=714631 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75156 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17011 oval.cisecurity.org
- http://secunia.com/advisories/48920 secunia.com
- http://secunia.com/advisories/48922 secunia.com
- http://secunia.com/advisories/48972 secunia.com
- http://secunia.com/advisories/49047 secunia.com
- http://secunia.com/advisories/49055 secunia.com
- http://www.debian.org/security/2012/dsa-2457 www.debian.org
- http://www.debian.org/security/2012/dsa-2458 www.debian.org
- http://www.debian.org/security/2012/dsa-2464 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:066 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:081 www.mandriva.com
- http://www.mozilla.org/security/announce/2012/mfsa2012-33.html www.mozilla.org
- http://www.securityfocus.com/bid/53224 www.securityfocus.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=714631 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75156 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17011 oval.cisecurity.org