CVE-2012-3965

Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 83.89%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
≤ 14.0
mozillafirefox_esr
𝑥
≤ 14.0
mozillafirefox
1.0
mozillafirefox_esr
1.0
mozillafirefox
1.0:preview_release
mozillafirefox_esr
1.0:preview_release
mozillafirefox
1.0.1
mozillafirefox_esr
1.0.1
mozillafirefox
1.0.2
mozillafirefox_esr
1.0.2
mozillafirefox
1.0.3
mozillafirefox_esr
1.0.3
mozillafirefox
1.0.4
mozillafirefox_esr
1.0.4
mozillafirefox
1.0.5
mozillafirefox_esr
1.0.5
mozillafirefox
1.0.6
mozillafirefox_esr
1.0.6
mozillafirefox
1.0.7
mozillafirefox_esr
1.0.7
mozillafirefox
1.0.8
mozillafirefox_esr
1.0.8
mozillafirefox
1.4.1
mozillafirefox_esr
1.4.1
mozillafirefox
1.5
mozillafirefox_esr
1.5
mozillafirefox
1.5:beta1
mozillafirefox_esr
1.5:beta1
mozillafirefox
1.5:beta2
mozillafirefox_esr
1.5:beta2
mozillafirefox
1.5.0.1
mozillafirefox_esr
1.5.0.1
mozillafirefox
1.5.0.2
mozillafirefox_esr
1.5.0.2
mozillafirefox
1.5.0.3
mozillafirefox_esr
1.5.0.3
mozillafirefox
1.5.0.4
mozillafirefox_esr
1.5.0.4
mozillafirefox
1.5.0.5
mozillafirefox_esr
1.5.0.5
mozillafirefox
1.5.0.6
mozillafirefox_esr
1.5.0.6
mozillafirefox
1.5.0.7
mozillafirefox_esr
1.5.0.7
mozillafirefox
1.5.0.8
mozillafirefox_esr
1.5.0.8
mozillafirefox
1.5.0.9
mozillafirefox_esr
1.5.0.9
mozillafirefox
1.5.0.10
mozillafirefox_esr
1.5.0.10
mozillafirefox
1.5.0.11
mozillafirefox_esr
1.5.0.11
mozillafirefox
1.5.0.12
mozillafirefox_esr
1.5.0.12
mozillafirefox
1.5.1
mozillafirefox_esr
1.5.1
mozillafirefox
1.5.2
mozillafirefox_esr
1.5.2
mozillafirefox
1.5.3
mozillafirefox_esr
1.5.3
mozillafirefox
1.5.4
mozillafirefox_esr
1.5.4
mozillafirefox
1.5.5
mozillafirefox_esr
1.5.5
mozillafirefox
1.5.6
mozillafirefox_esr
1.5.6
mozillafirefox
1.5.7
mozillafirefox_esr
1.5.7
mozillafirefox
1.5.8
mozillafirefox_esr
1.5.8
mozillafirefox
1.8
mozillafirefox_esr
1.8
mozillafirefox
2.0
mozillafirefox_esr
2.0
mozillafirefox
2.0.0.1
mozillafirefox_esr
2.0.0.1
mozillafirefox
2.0.0.2
mozillafirefox_esr
2.0.0.2
mozillafirefox
2.0.0.3
mozillafirefox_esr
2.0.0.3
mozillafirefox
2.0.0.4
mozillafirefox_esr
2.0.0.4
mozillafirefox
2.0.0.5
mozillafirefox_esr
2.0.0.5
mozillafirefox
2.0.0.6
mozillafirefox_esr
2.0.0.6
mozillafirefox
2.0.0.7
mozillafirefox_esr
2.0.0.7
mozillafirefox
2.0.0.8
mozillafirefox_esr
2.0.0.8
mozillafirefox
2.0.0.9
mozillafirefox_esr
2.0.0.9
mozillafirefox
2.0.0.10
mozillafirefox_esr
2.0.0.10
mozillafirefox
2.0.0.11
mozillafirefox_esr
2.0.0.11
mozillafirefox
2.0.0.12
mozillafirefox_esr
2.0.0.12
mozillafirefox
2.0.0.13
mozillafirefox_esr
2.0.0.13
mozillafirefox
2.0.0.14
mozillafirefox_esr
2.0.0.14
mozillafirefox
2.0.0.15
mozillafirefox_esr
2.0.0.15
mozillafirefox
2.0.0.16
mozillafirefox_esr
2.0.0.16
mozillafirefox
2.0.0.17
mozillafirefox_esr
2.0.0.17
mozillafirefox
2.0.0.18
mozillafirefox_esr
2.0.0.18
mozillafirefox
2.0.0.19
mozillafirefox_esr
2.0.0.19
mozillafirefox
2.0.0.20
mozillafirefox_esr
2.0.0.20
mozillafirefox
3.0
mozillafirefox_esr
3.0
mozillafirefox
3.0.1
mozillafirefox_esr
3.0.1
mozillafirefox
3.0.2
mozillafirefox_esr
3.0.2
mozillafirefox
3.0.3
mozillafirefox_esr
3.0.3
mozillafirefox
3.0.4
mozillafirefox_esr
3.0.4
mozillafirefox
3.0.5
mozillafirefox_esr
3.0.5
mozillafirefox
3.0.6
mozillafirefox_esr
3.0.6
mozillafirefox
3.0.7
mozillafirefox_esr
3.0.7
mozillafirefox
3.0.8
mozillafirefox_esr
3.0.8
mozillafirefox
3.0.9
mozillafirefox_esr
3.0.9
mozillafirefox
3.0.10
mozillafirefox_esr
3.0.10
mozillafirefox
3.0.11
mozillafirefox_esr
3.0.11
mozillafirefox
3.0.12
mozillafirefox_esr
3.0.12
mozillafirefox
3.0.13
mozillafirefox_esr
3.0.13
mozillafirefox
3.0.14
mozillafirefox_esr
3.0.14
mozillafirefox
3.0.15
mozillafirefox_esr
3.0.15
mozillafirefox
3.0.16
mozillafirefox_esr
3.0.16
mozillafirefox
3.0.17
mozillafirefox_esr
3.0.17
mozillafirefox
3.5
mozillafirefox_esr
3.5
mozillafirefox
3.5.1
mozillafirefox_esr
3.5.1
mozillafirefox
3.5.2
mozillafirefox_esr
3.5.2
mozillafirefox
3.5.3
mozillafirefox_esr
3.5.3
mozillafirefox
3.5.4
mozillafirefox_esr
3.5.4
mozillafirefox
3.5.5
mozillafirefox_esr
3.5.5
mozillafirefox
3.5.6
mozillafirefox_esr
3.5.6
mozillafirefox
3.5.7
mozillafirefox_esr
3.5.7
mozillafirefox
3.5.8
mozillafirefox_esr
3.5.8
mozillafirefox
3.5.9
mozillafirefox_esr
3.5.9
mozillafirefox
3.5.10
mozillafirefox_esr
3.5.10
mozillafirefox
3.5.11
mozillafirefox_esr
3.5.11
mozillafirefox
3.5.12
mozillafirefox_esr
3.5.12
mozillafirefox
3.5.13
mozillafirefox_esr
3.5.13
mozillafirefox
3.5.14
mozillafirefox_esr
3.5.14
mozillafirefox
3.5.15
mozillafirefox_esr
3.5.15
mozillafirefox
3.6
mozillafirefox_esr
3.6
mozillafirefox
3.6.2
mozillafirefox_esr
3.6.2
mozillafirefox
3.6.3
mozillafirefox_esr
3.6.3
mozillafirefox
3.6.4
mozillafirefox_esr
3.6.4
mozillafirefox
3.6.6
mozillafirefox_esr
3.6.6
mozillafirefox
3.6.7
mozillafirefox_esr
3.6.7
mozillafirefox
3.6.8
mozillafirefox_esr
3.6.8
mozillafirefox
3.6.9
mozillafirefox_esr
3.6.9
mozillafirefox
3.6.10
mozillafirefox_esr
3.6.10
mozillafirefox
3.6.11
mozillafirefox_esr
3.6.11
mozillafirefox
3.6.12
mozillafirefox_esr
3.6.12
mozillafirefox
3.6.13
mozillafirefox_esr
3.6.13
mozillafirefox
3.6.14
mozillafirefox_esr
3.6.14
mozillafirefox
3.6.15
mozillafirefox_esr
3.6.15
mozillafirefox
3.6.16
mozillafirefox_esr
3.6.16
mozillafirefox
3.6.17
mozillafirefox_esr
3.6.17
mozillafirefox
3.6.18
mozillafirefox_esr
3.6.18
mozillafirefox
3.6.19
mozillafirefox_esr
3.6.19
mozillafirefox
3.6.20
mozillafirefox_esr
3.6.20
mozillafirefox
3.6.21
mozillafirefox_esr
3.6.21
mozillafirefox
3.6.22
mozillafirefox_esr
3.6.22
mozillafirefox
3.6.23
mozillafirefox_esr
3.6.23
mozillafirefox
3.6.24
mozillafirefox_esr
3.6.24
mozillafirefox
3.6.25
mozillafirefox_esr
3.6.25
mozillafirefox
4.0
mozillafirefox_esr
4.0
mozillafirefox
4.0:beta1
mozillafirefox_esr
4.0:beta1
mozillafirefox
4.0:beta10
mozillafirefox_esr
4.0:beta10
mozillafirefox
4.0:beta11
mozillafirefox_esr
4.0:beta11
mozillafirefox
4.0:beta12
mozillafirefox_esr
4.0:beta12
mozillafirefox
4.0:beta2
mozillafirefox_esr
4.0:beta2
mozillafirefox
4.0:beta3
mozillafirefox_esr
4.0:beta3
mozillafirefox
4.0:beta4
mozillafirefox_esr
4.0:beta4
mozillafirefox
4.0:beta5
mozillafirefox_esr
4.0:beta5
mozillafirefox
4.0:beta6
mozillafirefox_esr
4.0:beta6
mozillafirefox
4.0:beta7
mozillafirefox_esr
4.0:beta7
mozillafirefox
4.0:beta8
mozillafirefox_esr
4.0:beta8
mozillafirefox
4.0:beta9
mozillafirefox_esr
4.0:beta9
mozillafirefox
4.0.1
mozillafirefox_esr
4.0.1
mozillafirefox
5.0
mozillafirefox_esr
5.0
mozillafirefox
5.0.1
mozillafirefox_esr
5.0.1
mozillafirefox
6.0
mozillafirefox_esr
6.0
mozillafirefox
6.0.1
mozillafirefox_esr
6.0.1
mozillafirefox
6.0.2
mozillafirefox_esr
6.0.2
mozillafirefox
7.0
mozillafirefox_esr
7.0
mozillafirefox
7.0.1
mozillafirefox_esr
7.0.1
mozillafirefox
8.0
mozillafirefox_esr
8.0
mozillafirefox
8.0.1
mozillafirefox_esr
8.0.1
mozillafirefox
9.0
mozillafirefox_esr
9.0
mozillafirefox
9.0.1
mozillafirefox_esr
9.0.1
mozillafirefox
10.0
mozillafirefox_esr
10.0
mozillafirefox
10.0.1
mozillafirefox_esr
10.0.1
mozillafirefox
10.0.2
mozillafirefox_esr
10.0.2
mozillafirefox
11.0
mozillafirefox_esr
11.0
mozillafirefox
12.0
mozillafirefox_esr
12.0
mozillafirefox
12.0:beta6
mozillafirefox_esr
12.0:beta6
mozillafirefox
13.0
mozillafirefox_esr
13.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 15.0+build1-0ubuntu0.10.04.1
released
natty
Fixed 15.0+build1-0ubuntu0.11.04.2
released
oneiric
Fixed 15.0+build1-0ubuntu0.11.10.1
released
precise
Fixed 15.0+build1-0ubuntu0.12.04.1
released
quantal
Fixed 15.0+build1-0ubuntu1
released
raring
Fixed 15.0+build1-0ubuntu1
released
saucy
Fixed 15.0+build1-0ubuntu1
released
seamonkey
hardy
ignored
lucid
ignored
natty
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
thunderbird
hardy
ignored
lucid
not-affected
natty
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
ignored
natty
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
xulrunner-2.0
hardy
dne
lucid
dne
natty
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
MozillaFirefox-translations-common
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
http://www.mozilla.org/security/announce/2012/mfsa2012-60.html
http://www.ubuntu.com/usn/USN-1548-1
http://www.ubuntu.com/usn/USN-1548-2
https://bugzilla.mozilla.org/show_bug.cgi?id=769108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16442
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
http://www.mozilla.org/security/announce/2012/mfsa2012-60.html
http://www.ubuntu.com/usn/USN-1548-1
http://www.ubuntu.com/usn/USN-1548-2
https://bugzilla.mozilla.org/show_bug.cgi?id=769108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16442