CVE-2012-0450

Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
Severity
UNKNOWN
AV:L/AC:L/Au:N/C:P/I:N/A:N
Atk. Vector
LOCAL
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
VendorProductVersion
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0
mozillafirefox
4.0.1
mozillafirefox
5.0
mozillafirefox
5.0.1
mozillafirefox
6.0
mozillafirefox
6.0.1
mozillafirefox
6.0.2
mozillafirefox
7.0
mozillafirefox
8.0
mozillafirefox
8.0.1
mozillafirefox
9.0
mozillaseamonkey
𝑥
≤ 2.7
mozillaseamonkey
1.0
mozillaseamonkey
1.0
mozillaseamonkey
1.0.1
mozillaseamonkey
1.0.2
mozillaseamonkey
1.0.3
mozillaseamonkey
1.0.4
mozillaseamonkey
1.0.5
mozillaseamonkey
1.0.6
mozillaseamonkey
1.0.7
mozillaseamonkey
1.0.8
mozillaseamonkey
1.0.9
mozillaseamonkey
1.1
mozillaseamonkey
1.1
mozillaseamonkey
1.1
mozillaseamonkey
1.1.1
mozillaseamonkey
1.1.2
mozillaseamonkey
1.1.3
mozillaseamonkey
1.1.4
mozillaseamonkey
1.1.5
mozillaseamonkey
1.1.6
mozillaseamonkey
1.1.7
mozillaseamonkey
1.1.8
mozillaseamonkey
1.1.9
mozillaseamonkey
1.1.10
mozillaseamonkey
1.1.11
mozillaseamonkey
1.1.12
mozillaseamonkey
1.1.13
mozillaseamonkey
1.1.14
mozillaseamonkey
1.1.15
mozillaseamonkey
1.1.16
mozillaseamonkey
1.1.17
mozillaseamonkey
1.1.18
mozillaseamonkey
1.1.19
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0
mozillaseamonkey
2.0.1
mozillaseamonkey
2.0.2
mozillaseamonkey
2.0.3
mozillaseamonkey
2.0.4
mozillaseamonkey
2.0.5
mozillaseamonkey
2.0.6
mozillaseamonkey
2.0.7
mozillaseamonkey
2.0.8
mozillaseamonkey
2.0.9
mozillaseamonkey
2.0.10
mozillaseamonkey
2.0.11
mozillaseamonkey
2.0.12
mozillaseamonkey
2.0.13
mozillaseamonkey
2.0.14
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.1
mozillaseamonkey
2.2
mozillaseamonkey
2.2
mozillaseamonkey
2.2
mozillaseamonkey
2.2
mozillaseamonkey
2.3
mozillaseamonkey
2.3
mozillaseamonkey
2.3
mozillaseamonkey
2.3
mozillaseamonkey
2.3.1
mozillaseamonkey
2.3.2
mozillaseamonkey
2.3.3
mozillaseamonkey
2.4
mozillaseamonkey
2.4
mozillaseamonkey
2.4
mozillaseamonkey
2.4
mozillaseamonkey
2.4.1
mozillaseamonkey
2.5
mozillaseamonkey
2.5
mozillaseamonkey
2.5
mozillaseamonkey
2.5
mozillaseamonkey
2.5
mozillaseamonkey
2.6
mozillaseamonkey
2.6
mozillaseamonkey
2.6
mozillaseamonkey
2.6
mozillaseamonkey
2.6
mozillaseamonkey
2.6.1
mozillaseamonkey
2.7
mozillaseamonkey
2.7
mozillaseamonkey
2.7
mozillaseamonkey
2.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
Fixed 10.0+build1-0ubuntu0.11.10.1
released
natty
Fixed 10.0+build1-0ubuntu0.11.04.1
released
maverick
Fixed 10.0+build1-0ubuntu0.10.10.1
released
lucid
Fixed 10.0+build1-0ubuntu0.10.04.2
released
hardy
ignored
seamonkey
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
ignored
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored
xulrunner-1.9.2
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
ignored
maverick
ignored
lucid
ignored
hardy
ignored
xulrunner-2.0
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
ignored
maverick
dne
lucid
dne
hardy
dne
Common Weakness Enumeration