CVE-2012-1967

Mozilla Firefox 4.x-13.0 - Remote Code Execution via JavaScript Sandbox Bypass

Title source: llm

Description

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.

References (28)

Core 28

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49977

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49992

Vendor Advisory x_refsource_confirm

http://www.mozilla.org/security/announce/2012/mfsa2012-56.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2012/dsa-2514

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2012/dsa-2528

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027256

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-1088.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49963

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/84013

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1509-2

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027258

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17025

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49979

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1510-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49965

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027257

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/54573

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=758344

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49964

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49994

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49968

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1509-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49993

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49972

Scores

EPSS 0.0399

EPSS Percentile 89.4%

Details

Status published

Products (33)

mozilla/firefox 4.0 (13 CPE variants)

mozilla/firefox 4.0.1

mozilla/firefox 5.0

mozilla/firefox 5.0.1

mozilla/firefox 6.0

mozilla/firefox 6.0.1

mozilla/firefox 6.0.2

mozilla/firefox 7.0

mozilla/firefox 7.0.1

mozilla/firefox 8.0

... and 23 more

Published Jul 18, 2012

Tracked Since Feb 18, 2026