CVE-2012-3993 The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do...
HighCVSS 9.3
EPSS 42.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 10.0 | No fix listed |
| mozilla Firefox | = 10.0.1 | No fix listed |
| mozilla Firefox | = 10.0.2 | No fix listed |
| mozilla Firefox | = 10.0.3 | No fix listed |
| mozilla Firefox | = 10.0.4 | No fix listed |
| mozilla Firefox | = 10.0.5 | No fix listed |
| mozilla Firefox | = 10.0.6 | No fix listed |
| mozilla Firefox | = 10.0.7 | No fix listed |
| mozilla Firefox | <= 15.0.1 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0-preview_release | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla Firefox | = 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0.7 | No fix listed |
| mozilla Firefox | = 1.0.8 | No fix listed |
| mozilla Firefox | = 1.4.1 | No fix listed |
| mozilla Firefox | = 1.5 | No fix listed |
| mozilla Firefox | = 1.5-beta1 | No fix listed |
| mozilla Firefox | = 1.5-beta2 | No fix listed |
| mozilla Firefox | = 1.5.0.1 | No fix listed |
| mozilla Firefox | = 1.5.0.2 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.5.0.3 | No fix listed |
| mozilla Firefox | = 1.5.0.4 | No fix listed |
| mozilla Firefox | = 1.5.0.5 | No fix listed |
| mozilla Firefox | = 1.5.0.6 | No fix listed |
| mozilla Firefox | = 1.5.0.7 | No fix listed |
| mozilla Firefox | = 1.5.0.8 | No fix listed |
| mozilla Firefox | = 1.5.0.9 | No fix listed |
| mozilla Firefox | = 1.5.0.10 | No fix listed |
| mozilla Firefox | = 1.5.0.11 | No fix listed |
| mozilla Firefox | = 1.5.0.12 | No fix listed |
| mozilla Firefox | = 1.5.1 | No fix listed |
| mozilla Firefox | = 1.5.2 | No fix listed |
| mozilla Firefox | = 1.5.3 | No fix listed |
| mozilla Firefox | = 1.5.4 | No fix listed |
| mozilla Firefox | = 1.5.5 | No fix listed |
| mozilla Firefox | = 1.5.6 | No fix listed |
| mozilla Firefox | = 1.5.7 | No fix listed |
| mozilla Firefox | = 1.5.8 | No fix listed |
| mozilla Firefox | = 1.8 | No fix listed |
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla Firefox | = 2.0.0.4 | No fix listed |
| mozilla Firefox | = 2.0.0.5 | No fix listed |
| mozilla Firefox | = 2.0.0.6 | No fix listed |
| mozilla Firefox | = 2.0.0.7 | No fix listed |
| mozilla Firefox | = 2.0.0.8 | No fix listed |
| mozilla Firefox | = 2.0.0.9 | No fix listed |
| mozilla Firefox | = 2.0.0.10 | No fix listed |
| mozilla Firefox | = 2.0.0.11 | No fix listed |
| mozilla Firefox | = 2.0.0.12 | No fix listed |
| mozilla Firefox | = 2.0.0.13 | No fix listed |
| mozilla Firefox | = 2.0.0.14 | No fix listed |
| mozilla Firefox | = 2.0.0.15 | No fix listed |
| mozilla Firefox | = 2.0.0.16 | No fix listed |
| mozilla Firefox | = 2.0.0.17 | No fix listed |
| mozilla Firefox | = 2.0.0.18 | No fix listed |
| mozilla Firefox | = 2.0.0.19 | No fix listed |
| mozilla Firefox | = 2.0.0.20 | No fix listed |
| mozilla Firefox | = 3.0 | No fix listed |
| mozilla Firefox | = 3.0.1 | No fix listed |
| mozilla Firefox | = 3.0.2 | No fix listed |
| mozilla Firefox | = 3.0.3 | No fix listed |
| mozilla Firefox | = 3.0.4 | No fix listed |
| mozilla Firefox | = 3.0.5 | No fix listed |
| mozilla Firefox | = 3.0.6 | No fix listed |
| mozilla Firefox | = 3.0.7 | No fix listed |
| mozilla Firefox | = 3.0.8 | No fix listed |
| mozilla Firefox | = 3.0.9 | No fix listed |
| mozilla Firefox | = 3.0.10 | No fix listed |
| mozilla Firefox | = 3.0.11 | No fix listed |
| mozilla Firefox | = 3.0.12 | No fix listed |
| mozilla Firefox | = 3.0.13 | No fix listed |
| mozilla Firefox | = 3.0.14 | No fix listed |
| mozilla Firefox | = 3.0.15 | No fix listed |
| mozilla Firefox | = 3.0.16 | No fix listed |
| mozilla Firefox | = 3.0.17 | No fix listed |
| mozilla Firefox | = 3.5 | No fix listed |
| mozilla Firefox | = 3.5.1 | No fix listed |
| mozilla Firefox | = 3.5.2 | No fix listed |
| mozilla Firefox | = 3.5.3 | No fix listed |
| mozilla Firefox | = 3.5.4 | No fix listed |
| mozilla Firefox | = 3.5.5 | No fix listed |
| mozilla Firefox | = 3.5.6 | No fix listed |
| mozilla Firefox | = 3.5.7 | No fix listed |
| mozilla Firefox | = 3.5.8 | No fix listed |
| mozilla Firefox | = 3.5.9 | No fix listed |
| mozilla Firefox | = 3.5.10 | No fix listed |
| mozilla Firefox | = 3.5.11 | No fix listed |
| mozilla Firefox | = 3.5.12 | No fix listed |
| mozilla Firefox | = 3.5.13 | No fix listed |
| mozilla Firefox | = 3.5.14 | No fix listed |
| mozilla Firefox | = 3.5.15 | No fix listed |
| mozilla Firefox | = 3.6 | No fix listed |
| mozilla Firefox | = 3.6.2 | No fix listed |
| mozilla Firefox | = 3.6.3 | No fix listed |
| mozilla Firefox | = 3.6.4 | No fix listed |
| mozilla Firefox | = 3.6.6 | No fix listed |
| mozilla Firefox | = 3.6.7 | No fix listed |
| mozilla Firefox | = 3.6.8 | No fix listed |
| mozilla Firefox | = 3.6.9 | No fix listed |
| mozilla Firefox | = 3.6.10 | No fix listed |
| mozilla Firefox | = 3.6.11 | No fix listed |
| mozilla Firefox | = 3.6.12 | No fix listed |
| mozilla Firefox | = 3.6.13 | No fix listed |
| mozilla Firefox | = 3.6.14 | No fix listed |
| mozilla Firefox | = 3.6.15 | No fix listed |
| mozilla Firefox | = 3.6.16 | No fix listed |
| mozilla Firefox | = 3.6.17 | No fix listed |
| mozilla Firefox | = 3.6.18 | No fix listed |
| mozilla Firefox | = 3.6.19 | No fix listed |
| mozilla Firefox | = 3.6.20 | No fix listed |
| mozilla Firefox | = 3.6.21 | No fix listed |
| mozilla Firefox | = 3.6.22 | No fix listed |
| mozilla Firefox | = 3.6.23 | No fix listed |
| mozilla Firefox | = 3.6.24 | No fix listed |
| mozilla Firefox | = 3.6.25 | No fix listed |
| mozilla Firefox | = 4.0 | No fix listed |
| mozilla Firefox | = 4.0-beta1 | No fix listed |
| mozilla Firefox | = 4.0-beta10 | No fix listed |
| mozilla Firefox | = 4.0-beta11 | No fix listed |
| mozilla Firefox | = 4.0-beta12 | No fix listed |
| mozilla Firefox | = 4.0-beta2 | No fix listed |
| mozilla Firefox | = 4.0-beta3 | No fix listed |
| mozilla Firefox | = 4.0-beta4 | No fix listed |
| mozilla Firefox | = 4.0-beta5 | No fix listed |
| mozilla Firefox | = 4.0-beta6 | No fix listed |
| mozilla Firefox | = 4.0-beta7 | No fix listed |
| mozilla Firefox | = 4.0-beta8 | No fix listed |
| mozilla Firefox | = 4.0-beta9 | No fix listed |
| mozilla Firefox | = 4.0.1 | No fix listed |
| mozilla Firefox | = 5.0 | No fix listed |
| mozilla Firefox | = 5.0.1 | No fix listed |
| mozilla Firefox | = 6.0 | No fix listed |
| mozilla Firefox | = 6.0.1 | No fix listed |
| mozilla Firefox | = 6.0.2 | No fix listed |
| mozilla Firefox | = 7.0 | No fix listed |
| mozilla Firefox | = 7.0.1 | No fix listed |
| mozilla Firefox | = 8.0 | No fix listed |
| mozilla Firefox | = 8.0.1 | No fix listed |
| mozilla Firefox | = 9.0 | No fix listed |
| mozilla Firefox | = 9.0.1 | No fix listed |
| mozilla Firefox | = 11.0 | No fix listed |
| mozilla Firefox | = 12.0 | No fix listed |
| mozilla Firefox | = 12.0-beta6 | No fix listed |
| mozilla Firefox | = 13.0 | No fix listed |
| mozilla Firefox | = 13.0.1 | No fix listed |
| mozilla Firefox | = 14.0 | No fix listed |
| mozilla Firefox | = 14.0.1 | No fix listed |
| mozilla Firefox | = 15.0 | No fix listed |
| mozilla thunderbird esr | = 10.0 | No fix listed |
| mozilla thunderbird esr | = 10.0.1 | No fix listed |
| mozilla thunderbird esr | = 10.0.2 | No fix listed |
| mozilla thunderbird esr | = 10.0.3 | No fix listed |
| mozilla thunderbird esr | = 10.0.4 | No fix listed |
| mozilla thunderbird esr | = 10.0.5 | No fix listed |
| mozilla thunderbird esr | = 10.0.6 | No fix listed |
| mozilla thunderbird esr | = 10.0.7 | No fix listed |
| mozilla Thunderbird | <= 15.0.1 | No fix listed |
| mozilla Thunderbird | = 1.0 | No fix listed |
| mozilla Thunderbird | = 1.0.1 | No fix listed |
| mozilla Thunderbird | = 1.0.2 | No fix listed |
| mozilla Thunderbird | = 1.0.3 | No fix listed |
| mozilla Thunderbird | = 1.0.4 | No fix listed |
| mozilla Thunderbird | = 1.0.5 | No fix listed |
| mozilla Thunderbird | = 1.0.5-beta | No fix listed |
| mozilla Thunderbird | = 1.0.6 | No fix listed |
| mozilla Thunderbird | = 1.0.7 | No fix listed |
| mozilla Thunderbird | = 1.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5 | No fix listed |
| mozilla Thunderbird | = 1.5-beta2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.1 | No fix listed |
| mozilla Thunderbird | = 1.5.0.2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.3 | No fix listed |
| mozilla Thunderbird | = 1.5.0.4 | No fix listed |
| mozilla Thunderbird | = 1.5.0.5 | No fix listed |
| mozilla Thunderbird | = 1.5.0.6 | No fix listed |
| mozilla Thunderbird | = 1.5.0.7 | No fix listed |
| mozilla Thunderbird | = 1.5.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5.0.9 | No fix listed |
| mozilla Thunderbird | = 1.5.0.10 | No fix listed |
| mozilla Thunderbird | = 1.5.0.11 | No fix listed |
| mozilla Thunderbird | = 1.5.0.12 | No fix listed |
| mozilla Thunderbird | = 1.5.0.13 | No fix listed |
| mozilla Thunderbird | = 1.5.0.14 | No fix listed |
| mozilla Thunderbird | = 1.5.1 | No fix listed |
| mozilla Thunderbird | = 1.5.2 | No fix listed |
| mozilla Thunderbird | = 1.7.1 | No fix listed |
| mozilla Thunderbird | = 1.7.3 | No fix listed |
| mozilla Thunderbird | = 2.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.1 | No fix listed |
| mozilla Thunderbird | = 2.0.0.2 | No fix listed |
| mozilla Thunderbird | = 2.0.0.3 | No fix listed |
References
- SUSE-SU-2012:1351 mailing-list third-party-advisory vendor-advisory
- 86111 broken-link vdb-entry
- RHSA-2012:1351 third-party-advisory vendor-advisory
- 50856 third-party-advisory
- 50892 third-party-advisory
- 50904 third-party-advisory
- 50935 third-party-advisory
- 50936 third-party-advisory
- 50984 third-party-advisory
- 55318 third-party-advisory
- MDVSA-2012:163 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- 56119 third-party-advisory vdb-entry
- USN-1611-1 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- firefox-cow-privilege-escalation(79153) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:16718 signature third-party-advisory vdb-entry