CVEvulnerability

CVE-2012-4193

6.8 MEDIUM Published 2012-10-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-346

Description

Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.

Affected configurations

• mozilla firefox (< 16.0.1) • mozilla firefox (>= 10.0 < 10.0.9) • mozilla seamonkey (< 2.13.1) • mozilla thunderbird (< 16.0.1) • mozilla thunderbird esr (>= 10.0 < 10.0.9) • suse linux enterprise desktop 10 • suse linux enterprise desktop 11 • suse linux enterprise server 10 • suse linux enterprise server 11 • suse linux enterprise software development kit 10 • canonical ubuntu linux 10.04 • canonical ubuntu linux 11.04 • canonical ubuntu linux 11.10 • canonical ubuntu linux 12.04 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.3 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0

Related

Weakness · CWE (1)

  • CWE-346 Origin Validation Error weakness

References