CVE-2012-4192

EUVD-2012-4136
Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
16.0
mozillaseamonkey
2.13
mozillathunderbird
16.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
Fixed 16.0.1+build1-0ubuntu0.10.04.1
released
natty
Fixed 16.0.1+build1-0ubuntu0.11.04.1
released
oneiric
Fixed 16.0.1+build1-0ubuntu0.11.10.1
released
precise
Fixed 16.0.1+build1-0ubuntu0.12.04.1
released
thunderbird
hardy
ignored
lucid
not-affected
natty
not-affected
oneiric
not-affected
precise
not-affected
Common Weakness Enumeration