CVE-2012-0458

14.03.2012, 19:55

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	6.8 UNKNOWN	NETWORK	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P
mitre	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 86%

Vendor	Product	Version
mozilla	firefox	𝑥 ≤ 3.6.27
mozilla	firefox	4.0 < 𝑥 ≤ 10.0
mozilla	firefox	10.0
mozilla	firefox	10.0.1
mozilla	firefox	10.0.2
mozilla	thunderbird	1.0 ≤ 𝑥 ≤ 3.1.19
mozilla	thunderbird	5.0 < 𝑥 ≤ 10.0
mozilla	thunderbird_esr	10.0
mozilla	thunderbird_esr	10.0.1
mozilla	thunderbird_esr	10.0.2
mozilla	seamonkey	-
mozilla	seamonkey	1.0
mozilla	seamonkey	1.0:alpha
mozilla	seamonkey	1.0:beta
mozilla	seamonkey	1.0.1
mozilla	seamonkey	1.0.2
mozilla	seamonkey	1.0.3
mozilla	seamonkey	1.0.4
mozilla	seamonkey	1.0.5
mozilla	seamonkey	1.0.6
mozilla	seamonkey	1.0.7
mozilla	seamonkey	1.0.8
mozilla	seamonkey	1.0.9
mozilla	seamonkey	1.1
mozilla	seamonkey	1.1:alpha
mozilla	seamonkey	1.1:beta
mozilla	seamonkey	1.1.1
mozilla	seamonkey	1.1.2
mozilla	seamonkey	1.1.3
mozilla	seamonkey	1.1.4
mozilla	seamonkey	1.1.5
mozilla	seamonkey	1.1.6
mozilla	seamonkey	1.1.7
mozilla	seamonkey	1.1.8
mozilla	seamonkey	1.1.9
mozilla	seamonkey	1.1.10
mozilla	seamonkey	1.1.11
mozilla	seamonkey	1.1.12
mozilla	seamonkey	1.1.13
mozilla	seamonkey	1.1.14
mozilla	seamonkey	1.1.15
mozilla	seamonkey	1.1.16
mozilla	seamonkey	1.1.17
mozilla	seamonkey	1.1.18
mozilla	seamonkey	1.1.19
mozilla	seamonkey	1.5.0.8
mozilla	seamonkey	1.5.0.9
mozilla	seamonkey	1.5.0.10
mozilla	seamonkey	2.0
mozilla	seamonkey	2.0:alpha_1
mozilla	seamonkey	2.0:alpha_2
mozilla	seamonkey	2.0:alpha_3
mozilla	seamonkey	2.0:beta_1
mozilla	seamonkey	2.0:beta_2
mozilla	seamonkey	2.0:rc1
mozilla	seamonkey	2.0:rc2
mozilla	seamonkey	2.0.1
mozilla	seamonkey	2.0.2
mozilla	seamonkey	2.0.3
mozilla	seamonkey	2.0.4
mozilla	seamonkey	2.0.5
mozilla	seamonkey	2.0.6
mozilla	seamonkey	2.0.7
mozilla	seamonkey	2.0.8
mozilla	seamonkey	2.0.9
mozilla	seamonkey	2.0.10
mozilla	seamonkey	2.0.11
mozilla	seamonkey	2.0.12
mozilla	seamonkey	2.0.13
mozilla	seamonkey	2.0.14
mozilla	seamonkey	2.1
mozilla	seamonkey	2.1:alpha1
mozilla	seamonkey	2.1:alpha2
mozilla	seamonkey	2.1:alpha3
mozilla	seamonkey	2.1:beta1
mozilla	seamonkey	2.1:beta2
mozilla	seamonkey	2.1:beta3
mozilla	seamonkey	2.1:rc1
mozilla	seamonkey	2.1:rc2
mozilla	seamonkey	2.2
mozilla	seamonkey	2.2:beta1
mozilla	seamonkey	2.2:beta2
mozilla	seamonkey	2.2:beta3
mozilla	seamonkey	2.3
mozilla	seamonkey	2.3:beta1
mozilla	seamonkey	2.3:beta2
mozilla	seamonkey	2.3:beta3
mozilla	seamonkey	2.3.1
mozilla	seamonkey	2.3.2
mozilla	seamonkey	2.3.3
mozilla	seamonkey	2.4
mozilla	seamonkey	2.4:beta1
mozilla	seamonkey	2.4:beta2
mozilla	seamonkey	2.4:beta3
mozilla	seamonkey	2.4.1
mozilla	seamonkey	2.5
mozilla	seamonkey	2.5:beta1
mozilla	seamonkey	2.5:beta2
mozilla	seamonkey	2.5:beta3
mozilla	seamonkey	2.5:beta4
mozilla	seamonkey	2.6
mozilla	seamonkey	2.6:beta1
mozilla	seamonkey	2.6:beta2
mozilla	seamonkey	2.6:beta3
mozilla	seamonkey	2.6:beta4
mozilla	seamonkey	2.6.1
mozilla	seamonkey	2.7
mozilla	seamonkey	2.7:beta1
mozilla	seamonkey	2.7:beta2
mozilla	seamonkey	2.7:beta3
mozilla	seamonkey	2.7:beta4
mozilla	seamonkey	2.7:beta5
mozilla	seamonkey	2.7.1
mozilla	seamonkey	2.7.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

firefox

saucy	not-affected
raring	not-affected
quantal	not-affected
precise	not-affected
oneiric	Fixed 11.0+build1-0ubuntu0.11.10.1 released
natty	Fixed 11.0+build1-0ubuntu0.11.04.1 released
maverick	Fixed 11.0+build1-0ubuntu0.10.10.2 released
lucid	Fixed 11.0+build1-0ubuntu0.10.04.2 released
hardy	ignored

seamonkey

saucy	dne
raring	dne
quantal	dne
precise	dne
oneiric	ignored
natty	ignored
maverick	ignored
lucid	ignored
hardy	ignored

thunderbird

saucy	not-affected
raring	not-affected
quantal	not-affected
precise	not-affected
oneiric	Fixed 11.0+build1-0ubuntu0.11.10.1 released
natty	Fixed 3.1.20+build1+nobinonly-0ubuntu0.11.04.1 released
maverick	Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.10.1 released
lucid	Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.04.1 released
hardy	ignored

xulrunner-1.9.2

saucy	dne
raring	dne
quantal	dne
precise	dne
oneiric	dne
natty	Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.11.04.1 released
maverick	Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1 released
lucid	Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1 released
hardy	ignored