Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-1959

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.

Published

2012-07-18T10:26:48.937

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0.1 Yes
Application mozilla firefox 5.0 Yes
Application mozilla firefox 5.0.1 Yes
Application mozilla firefox 6.0 Yes
Application mozilla firefox 6.0.1 Yes
Application mozilla firefox 6.0.2 Yes
Application mozilla firefox 7.0 Yes
Application mozilla firefox 7.0.1 Yes
Application mozilla firefox 8.0 Yes
Application mozilla firefox 8.0.1 Yes
Application mozilla firefox 9.0 Yes
Application mozilla firefox 9.0.1 Yes
Application mozilla firefox 11.0 Yes
Application mozilla firefox 12.0 Yes
Application mozilla firefox 12.0 Yes
Application mozilla firefox 13.0 Yes
Application mozilla firefox 10.0 Yes
Application mozilla firefox 10.0.1 Yes
Application mozilla firefox 10.0.2 Yes
Application mozilla firefox 10.0.3 Yes
Application mozilla firefox 10.0.4 Yes
Application mozilla firefox 10.0.5 Yes
Application mozilla thunderbird 5.0 Yes
Application mozilla thunderbird 6.0 Yes
Application mozilla thunderbird 6.0.1 Yes
Application mozilla thunderbird 6.0.2 Yes
Application mozilla thunderbird 7.0 Yes
Application mozilla thunderbird 7.0.1 Yes
Application mozilla thunderbird 8.0 Yes
Application mozilla thunderbird 9.0 Yes
Application mozilla thunderbird 9.0.1 Yes
Application mozilla thunderbird 10.0 Yes
Application mozilla thunderbird 10.0.1 Yes
Application mozilla thunderbird 10.0.2 Yes
Application mozilla thunderbird 10.0.3 Yes
Application mozilla thunderbird 10.0.4 Yes
Application mozilla thunderbird 11.0 Yes
Application mozilla thunderbird 12.0 Yes
Application mozilla thunderbird 13.0 Yes
Application mozilla thunderbird_esr 10.0 Yes
Application mozilla thunderbird_esr 10.0.1 Yes
Application mozilla thunderbird_esr 10.0.2 Yes
Application mozilla thunderbird_esr 10.0.3 Yes
Application mozilla thunderbird_esr 10.0.4 Yes
Application mozilla thunderbird_esr 10.0.5 Yes
Application mozilla seamonkey ≤ 2.10 Yes
Application mozilla seamonkey 1.0 Yes
Application mozilla seamonkey 1.0 Yes
Application mozilla seamonkey 1.0 Yes
Application mozilla seamonkey 1.0.1 Yes
Application mozilla seamonkey 1.0.2 Yes
Application mozilla seamonkey 1.0.3 Yes
Application mozilla seamonkey 1.0.4 Yes
Application mozilla seamonkey 1.0.5 Yes
Application mozilla seamonkey 1.0.6 Yes
Application mozilla seamonkey 1.0.7 Yes
Application mozilla seamonkey 1.0.8 Yes
Application mozilla seamonkey 1.0.9 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1.1 Yes
Application mozilla seamonkey 1.1.2 Yes
Application mozilla seamonkey 1.1.3 Yes
Application mozilla seamonkey 1.1.4 Yes
Application mozilla seamonkey 1.1.5 Yes
Application mozilla seamonkey 1.1.6 Yes
Application mozilla seamonkey 1.1.7 Yes
Application mozilla seamonkey 1.1.8 Yes
Application mozilla seamonkey 1.1.9 Yes
Application mozilla seamonkey 1.1.10 Yes
Application mozilla seamonkey 1.1.11 Yes
Application mozilla seamonkey 1.1.12 Yes
Application mozilla seamonkey 1.1.13 Yes
Application mozilla seamonkey 1.1.14 Yes
Application mozilla seamonkey 1.1.15 Yes
Application mozilla seamonkey 1.1.16 Yes
Application mozilla seamonkey 1.1.17 Yes
Application mozilla seamonkey 1.1.18 Yes
Application mozilla seamonkey 1.1.19 Yes
Application mozilla seamonkey 1.5.0.8 Yes
Application mozilla seamonkey 1.5.0.9 Yes
Application mozilla seamonkey 1.5.0.10 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0.1 Yes
Application mozilla seamonkey 2.0.2 Yes
Application mozilla seamonkey 2.0.3 Yes
Application mozilla seamonkey 2.0.4 Yes
Application mozilla seamonkey 2.0.5 Yes
Application mozilla seamonkey 2.0.6 Yes
Application mozilla seamonkey 2.0.7 Yes
Application mozilla seamonkey 2.0.8 Yes
Application mozilla seamonkey 2.0.9 Yes
Application mozilla seamonkey 2.0.10 Yes
Application mozilla seamonkey 2.0.11 Yes
Application mozilla seamonkey 2.0.12 Yes
Application mozilla seamonkey 2.0.13 Yes
Application mozilla seamonkey 2.0.14 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
References