Логотип exploitDog
bind:CVE-2012-4209
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-4209

Количество 7

Количество 7

ubuntu логотип

CVE-2012-4209

около 13 лет назад

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

CVSS2: 4.3
EPSS: Низкий
redhat логотип

CVE-2012-4209

около 13 лет назад

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2012-4209

около 13 лет назад

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2012-4209

около 13 лет назад

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderb ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-mc6f-7xm8-q752

больше 3 лет назад

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1483

около 13 лет назад

ELSA-2012-1483: thunderbird security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1482

около 13 лет назад

ELSA-2012-1482: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-4209

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

CVSS2: 4.3
2%
Низкий
около 13 лет назад
redhat логотип
CVE-2012-4209

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

CVSS2: 4.3
2%
Низкий
около 13 лет назад
nvd логотип
CVE-2012-4209

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

CVSS2: 4.3
2%
Низкий
около 13 лет назад
debian логотип
CVE-2012-4209

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderb ...

CVSS2: 4.3
2%
Низкий
около 13 лет назад
github логотип
GHSA-mc6f-7xm8-q752

Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.

2%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2012-1483

ELSA-2012-1483: thunderbird security update (CRITICAL)

около 13 лет назад
oracle-oval логотип
ELSA-2012-1482

ELSA-2012-1482: firefox security update (CRITICAL)

около 13 лет назад

Уязвимостей на страницу