CVE-2012-0458

EUVD-2012-0490

14.03.2012, 19:55

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 85%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 ≤ 3.6.27
mozilla	firefox	4.0 < 𝑥 ≤ 10.0
mozilla	firefox	10.0
mozilla	firefox	10.0.1
mozilla	firefox	10.0.2
mozilla	thunderbird	1.0 ≤ 𝑥 ≤ 3.1.19
mozilla	thunderbird	5.0 < 𝑥 ≤ 10.0
mozilla	thunderbird_esr	10.0
mozilla	thunderbird_esr	10.0.1
mozilla	thunderbird_esr	10.0.2
mozilla	seamonkey	-
mozilla	seamonkey	1.0
mozilla	seamonkey	1.0:alpha
mozilla	seamonkey	1.0:beta
mozilla	seamonkey	1.0.1
mozilla	seamonkey	1.0.2
mozilla	seamonkey	1.0.3
mozilla	seamonkey	1.0.4
mozilla	seamonkey	1.0.5
mozilla	seamonkey	1.0.6
mozilla	seamonkey	1.0.7
mozilla	seamonkey	1.0.8
mozilla	seamonkey	1.0.9
mozilla	seamonkey	1.1
mozilla	seamonkey	1.1:alpha
mozilla	seamonkey	1.1:beta
mozilla	seamonkey	1.1.1
mozilla	seamonkey	1.1.2
mozilla	seamonkey	1.1.3
mozilla	seamonkey	1.1.4
mozilla	seamonkey	1.1.5
mozilla	seamonkey	1.1.6
mozilla	seamonkey	1.1.7
mozilla	seamonkey	1.1.8
mozilla	seamonkey	1.1.9
mozilla	seamonkey	1.1.10
mozilla	seamonkey	1.1.11
mozilla	seamonkey	1.1.12
mozilla	seamonkey	1.1.13
mozilla	seamonkey	1.1.14
mozilla	seamonkey	1.1.15
mozilla	seamonkey	1.1.16
mozilla	seamonkey	1.1.17
mozilla	seamonkey	1.1.18
mozilla	seamonkey	1.1.19
mozilla	seamonkey	1.5.0.8
mozilla	seamonkey	1.5.0.9
mozilla	seamonkey	1.5.0.10
mozilla	seamonkey	2.0
mozilla	seamonkey	2.0:alpha_1
mozilla	seamonkey	2.0:alpha_2
mozilla	seamonkey	2.0:alpha_3
mozilla	seamonkey	2.0:beta_1
mozilla	seamonkey	2.0:beta_2
mozilla	seamonkey	2.0:rc1
mozilla	seamonkey	2.0:rc2
mozilla	seamonkey	2.0.1
mozilla	seamonkey	2.0.2
mozilla	seamonkey	2.0.3
mozilla	seamonkey	2.0.4
mozilla	seamonkey	2.0.5
mozilla	seamonkey	2.0.6
mozilla	seamonkey	2.0.7
mozilla	seamonkey	2.0.8
mozilla	seamonkey	2.0.9
mozilla	seamonkey	2.0.10
mozilla	seamonkey	2.0.11
mozilla	seamonkey	2.0.12
mozilla	seamonkey	2.0.13
mozilla	seamonkey	2.0.14
mozilla	seamonkey	2.1
mozilla	seamonkey	2.1:alpha1
mozilla	seamonkey	2.1:alpha2
mozilla	seamonkey	2.1:alpha3
mozilla	seamonkey	2.1:beta1
mozilla	seamonkey	2.1:beta2
mozilla	seamonkey	2.1:beta3
mozilla	seamonkey	2.1:rc1
mozilla	seamonkey	2.1:rc2
mozilla	seamonkey	2.2
mozilla	seamonkey	2.2:beta1
mozilla	seamonkey	2.2:beta2
mozilla	seamonkey	2.2:beta3
mozilla	seamonkey	2.3
mozilla	seamonkey	2.3:beta1
mozilla	seamonkey	2.3:beta2
mozilla	seamonkey	2.3:beta3
mozilla	seamonkey	2.3.1
mozilla	seamonkey	2.3.2
mozilla	seamonkey	2.3.3
mozilla	seamonkey	2.4
mozilla	seamonkey	2.4:beta1
mozilla	seamonkey	2.4:beta2
mozilla	seamonkey	2.4:beta3
mozilla	seamonkey	2.4.1
mozilla	seamonkey	2.5
mozilla	seamonkey	2.5:beta1
mozilla	seamonkey	2.5:beta2
mozilla	seamonkey	2.5:beta3
mozilla	seamonkey	2.5:beta4
mozilla	seamonkey	2.6
mozilla	seamonkey	2.6:beta1
mozilla	seamonkey	2.6:beta2
mozilla	seamonkey	2.6:beta3
mozilla	seamonkey	2.6:beta4
mozilla	seamonkey	2.6.1
mozilla	seamonkey	2.7
mozilla	seamonkey	2.7:beta1
mozilla	seamonkey	2.7:beta2
mozilla	seamonkey	2.7:beta3
mozilla	seamonkey	2.7:beta4
mozilla	seamonkey	2.7:beta5
mozilla	seamonkey	2.7.1
mozilla	seamonkey	2.7.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

firefox

hardy	ignored
lucid	Fixed 11.0+build1-0ubuntu0.10.04.2 released
maverick	Fixed 11.0+build1-0ubuntu0.10.10.2 released
natty	Fixed 11.0+build1-0ubuntu0.11.04.1 released
oneiric	Fixed 11.0+build1-0ubuntu0.11.10.1 released
precise	not-affected
quantal	not-affected
raring	not-affected
saucy	not-affected

seamonkey

hardy	ignored
lucid	ignored
maverick	ignored
natty	ignored
oneiric	ignored
precise	dne
quantal	dne
raring	dne
saucy	dne

thunderbird

hardy	ignored
lucid	Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.04.1 released
maverick	Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.10.1 released
natty	Fixed 3.1.20+build1+nobinonly-0ubuntu0.11.04.1 released
oneiric	Fixed 11.0+build1-0ubuntu0.11.10.1 released
precise	not-affected
quantal	not-affected
raring	not-affected
saucy	not-affected

xulrunner-1.9.2

hardy	ignored
lucid	Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1 released
maverick	Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1 released
natty	Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.11.04.1 released
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne