CVE-2012-0477

SeaMonkey < 2.9 - Cross-Site Scripting via ISO-2022-KR/CN Character Set

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set.

References (15)

Core 15
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16889
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75154
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=718573
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:081
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:066
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48922
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53229
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49055
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2458
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48920
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2457
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2464
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48972
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49047

Scores

EPSS 0.0203
EPSS Percentile 78.9%

Details

CWE
CWE-79
Status published
Products (34)
mozilla/firefox 4.0 (13 CPE variants)
mozilla/firefox 4.0.1
mozilla/firefox 5.0
mozilla/firefox 5.0.1
mozilla/firefox 6.0
mozilla/firefox 6.0.1
mozilla/firefox 6.0.2
mozilla/firefox 7.0
mozilla/firefox 7.0.1
mozilla/firefox 8.0
... and 24 more
Published Apr 25, 2012
Tracked Since Feb 18, 2026