CVE-2012-3991 Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProp...
HighCVSS 9.3
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 10.0.8 | 10.0.8 |
| mozilla Firefox | < 16.0 | 16.0 |
| mozilla thunderbird esr | < 10.0.8 | 10.0.8 |
| mozilla Thunderbird | < 16.0 | 16.0 |
| mozilla seamonkey | < 2.13 | 2.13 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
| Canonical Ubuntu Linux | = 11.10 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.3 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise sdk | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
References
- SUSE-SU-2012:1351 mailing-list third-party-advisory vendor-advisory
- 86098 broken-link vdb-entry
- RHSA-2012:1351 third-party-advisory vendor-advisory
- 50856 third-party-advisory
- 50892 third-party-advisory
- 50904 third-party-advisory
- 50935 third-party-advisory
- 50936 third-party-advisory
- 50984 third-party-advisory
- 51181 third-party-advisory
- 55318 third-party-advisory
- DSA-2565 third-party-advisory vendor-advisory
- DSA-2569 third-party-advisory vendor-advisory
- DSA-2572 third-party-advisory vendor-advisory
- MDVSA-2012:163 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- 55930 third-party-advisory vdb-entry
- USN-1611-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- oval:org.mitre.oval:def:16646 signature third-party-advisory vdb-entry