Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-1967

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.

Published

2012-07-18T10:26:49.250

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0 Yes
Application mozilla firefox 4.0.1 Yes
Application mozilla firefox 5.0 Yes
Application mozilla firefox 5.0.1 Yes
Application mozilla firefox 6.0 Yes
Application mozilla firefox 6.0.1 Yes
Application mozilla firefox 6.0.2 Yes
Application mozilla firefox 7.0 Yes
Application mozilla firefox 7.0.1 Yes
Application mozilla firefox 8.0 Yes
Application mozilla firefox 8.0.1 Yes
Application mozilla firefox 9.0 Yes
Application mozilla firefox 9.0.1 Yes
Application mozilla firefox 11.0 Yes
Application mozilla firefox 12.0 Yes
Application mozilla firefox 12.0 Yes
Application mozilla firefox 13.0 Yes
Application mozilla firefox 10.0 Yes
Application mozilla firefox 10.0.1 Yes
Application mozilla firefox 10.0.2 Yes
Application mozilla firefox 10.0.3 Yes
Application mozilla firefox 10.0.4 Yes
Application mozilla firefox 10.0.5 Yes
Application mozilla thunderbird 5.0 Yes
Application mozilla thunderbird 6.0 Yes
Application mozilla thunderbird 6.0.1 Yes
Application mozilla thunderbird 6.0.2 Yes
Application mozilla thunderbird 7.0 Yes
Application mozilla thunderbird 7.0.1 Yes
Application mozilla thunderbird 8.0 Yes
Application mozilla thunderbird 9.0 Yes
Application mozilla thunderbird 9.0.1 Yes
Application mozilla thunderbird 10.0 Yes
Application mozilla thunderbird 10.0.1 Yes
Application mozilla thunderbird 10.0.2 Yes
Application mozilla thunderbird 10.0.3 Yes
Application mozilla thunderbird 10.0.4 Yes
Application mozilla thunderbird 11.0 Yes
Application mozilla thunderbird 12.0 Yes
Application mozilla thunderbird 13.0 Yes
Application mozilla thunderbird_esr 10.0 Yes
Application mozilla thunderbird_esr 10.0.1 Yes
Application mozilla thunderbird_esr 10.0.2 Yes
Application mozilla thunderbird_esr 10.0.3 Yes
Application mozilla thunderbird_esr 10.0.4 Yes
Application mozilla thunderbird_esr 10.0.5 Yes
Application mozilla seamonkey ≤ 2.10 Yes
Application mozilla seamonkey 1.0 Yes
Application mozilla seamonkey 1.0 Yes
Application mozilla seamonkey 1.0 Yes
Application mozilla seamonkey 1.0.1 Yes
Application mozilla seamonkey 1.0.2 Yes
Application mozilla seamonkey 1.0.3 Yes
Application mozilla seamonkey 1.0.4 Yes
Application mozilla seamonkey 1.0.5 Yes
Application mozilla seamonkey 1.0.6 Yes
Application mozilla seamonkey 1.0.7 Yes
Application mozilla seamonkey 1.0.8 Yes
Application mozilla seamonkey 1.0.9 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1 Yes
Application mozilla seamonkey 1.1.1 Yes
Application mozilla seamonkey 1.1.2 Yes
Application mozilla seamonkey 1.1.3 Yes
Application mozilla seamonkey 1.1.4 Yes
Application mozilla seamonkey 1.1.5 Yes
Application mozilla seamonkey 1.1.6 Yes
Application mozilla seamonkey 1.1.7 Yes
Application mozilla seamonkey 1.1.8 Yes
Application mozilla seamonkey 1.1.9 Yes
Application mozilla seamonkey 1.1.10 Yes
Application mozilla seamonkey 1.1.11 Yes
Application mozilla seamonkey 1.1.12 Yes
Application mozilla seamonkey 1.1.13 Yes
Application mozilla seamonkey 1.1.14 Yes
Application mozilla seamonkey 1.1.15 Yes
Application mozilla seamonkey 1.1.16 Yes
Application mozilla seamonkey 1.1.17 Yes
Application mozilla seamonkey 1.1.18 Yes
Application mozilla seamonkey 1.1.19 Yes
Application mozilla seamonkey 1.5.0.8 Yes
Application mozilla seamonkey 1.5.0.9 Yes
Application mozilla seamonkey 1.5.0.10 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0.1 Yes
Application mozilla seamonkey 2.0.2 Yes
Application mozilla seamonkey 2.0.3 Yes
Application mozilla seamonkey 2.0.4 Yes
Application mozilla seamonkey 2.0.5 Yes
Application mozilla seamonkey 2.0.6 Yes
Application mozilla seamonkey 2.0.7 Yes
Application mozilla seamonkey 2.0.8 Yes
Application mozilla seamonkey 2.0.9 Yes
Application mozilla seamonkey 2.0.10 Yes
Application mozilla seamonkey 2.0.11 Yes
Application mozilla seamonkey 2.0.12 Yes
Application mozilla seamonkey 2.0.13 Yes
Application mozilla seamonkey 2.0.14 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
References