CVE-2012-4193
Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.
- Affected products
- Centos, Firefox Esr, Firefox, Red Hat, Seamonkey, Suse, Thunderbird, Thunderbird Esr
- Mozilla Firefox
- < 16.0.1, 10.0.9
- Mozilla Seamonkey
- < 2.13.1
- Mozilla Thunderbird
- < 16.0.1
- Mozilla Thunderbird Esr
- < 10.0.9
- Fix
- Available
- CVSS 2.0
- 6.8 MEDIUM
- EPSS
- 1.2% (64th percentile)
- Weakness
- CWE-346
- NVD status
- Modified
- Published
- 2012-10-12
CVE-2012-4193 at NVD
No indexed exploits for CVE-2012-4193 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2012-4193 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.