CVE-2012-3991
Summary
| CVE | CVE-2012-3991 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2012-10-10 17:55:00 UTC |
|---|
| Updated | 2020-08-11 13:37:00 UTC |
|---|
| Description | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| USN-1611-1: Thunderbird vulnerabilities | Ubuntu |
UBUNTU |
www.ubuntu.com |
Third Party Advisory |
| Security Advisory SA50936 - Mozilla Firefox / Thunderbird Multiple Vulnerabilities - Secunia |
SECUNIA |
secunia.com |
Third Party Advisory |
| Mozilla Firefox/Thunderbird/SeaMonkey CVE-2012-3991 Security Bypass Vulnerability |
BID |
www.securityfocus.com |
Third Party Advisory, VDB Entry |
| About Secunia Research | Flexera |
SECUNIA |
secunia.com |
Third Party Advisory |
| Red Hat Customer Portal |
REDHAT |
rhn.redhat.com |
Third Party Advisory |
| About Secunia Research | Flexera |
SECUNIA |
secunia.com |
Third Party Advisory |
| 783260 – (CVE-2012-3991) Error: Error: Permission denied to access property 'toString' when open certain site |
CONFIRM |
bugzilla.mozilla.org |
Issue Tracking, Vendor Advisory |
| 86098 |
OSVDB |
osvdb.org |
Broken Link |
| Repository / Oval Repository |
OVAL |
oval.cisecurity.org |
Third Party Advisory |
| Debian -- Security Information -- DSA-2569-1 icedove |
DEBIAN |
www.debian.org |
Third Party Advisory |
| About Secunia Research | Flexera |
SECUNIA |
secunia.com |
Third Party Advisory |
| Debian -- Security Information -- DSA-2565-1 iceweasel |
DEBIAN |
www.debian.org |
Third Party Advisory |
| MFSA 2012-81: GetProperty function can bypass security checks |
CONFIRM |
www.mozilla.org |
Vendor Advisory |
| About Secunia Research | Flexera |
SECUNIA |
secunia.com |
Third Party Advisory |
| Debian -- Security Information -- DSA-2572-1 iceape |
DEBIAN |
www.debian.org |
Third Party Advisory |
| Security Advisory SA50935 - Mozilla SeaMonkey Multiple Vulnerabilities - Secunia |
SECUNIA |
secunia.com |
Third Party Advisory |
| Support / Security / Advisories / / MDVSA-2012:163 | Mandriva |
MANDRIVA |
www.mandriva.com |
Third Party Advisory |
| Security Advisory SA50892 - Ubuntu update for firefox - Secunia |
SECUNIA |
secunia.com |
Third Party Advisory |
| Security Advisory SA51181 - Debian update for iceape - Secunia |
SECUNIA |
secunia.com |
Third Party Advisory |
| [security-announce] SUSE-SU-2012:1351-1: important: Security update for |
SUSE |
lists.opensuse.org |
Mailing List, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 690312 Free Berkeley Software Distribution (FreeBSD) Security Update for mozilla (6e5a9afd-12d3-11e2-b47d-c8600054b392)
