PT-2012-2579 · Mozilla+3 · Firefox+7

Gavin Sharp · Published 2012-03-13 · Updated 2024-12-12 · CVE-2012-0458

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 10.0 Mozilla Firefox version 3.6.28 and earlier Firefox ESR versions 10.x through 10.0.2 Thunderbird versions 5.0 through 10.0 Thunderbird version 3.1.20 and earlier Thunderbird ESR versions 10.x through 10.0.2 SeaMonkey version 2.8 and earlier

Description The issue allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context. This is possible because the software does not properly restrict setting the home page through the dragging of a URL to the home button.

Recommendations For Mozilla Firefox versions 4.x through 10.0, update to a version later than 10.0 to resolve the issue. For Mozilla Firefox version 3.6.28 and earlier, update to a version later than 3.6.28 to resolve the issue. For Firefox ESR versions 10.x through 10.0.2, update to version 10.0.3 or later to resolve the issue. For Thunderbird versions 5.0 through 10.0, update to a version later than 10.0 to resolve the issue. For Thunderbird version 3.1.20 and earlier, update to a version later than 3.1.20 to resolve the issue. For Thunderbird ESR versions 10.x through 10.0.2, update to version 10.0.3 or later to resolve the issue. For SeaMonkey version 2.8 and earlier, update to a version later than 2.8 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2012_0387

CESA-2012_0388

CVE-2012-0458

DSA-2433-1

DSA-2437-1

DSA-2458-1

OPENSUSE-SU-2014_1100-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:10230-1

OPENSUSE-SU-2024:14572-1

RHSA-2012:0387

RHSA-2012:0388

RHSA-2012_0387

RHSA-2012_0388

Affected Products

Centos

Firefox Esr

Firefox

Red Hat

Seamonkey

Suse

Thunderbird

Thunderbird Esr

References · 3146

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proto_crmfrequest.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_tostring_console_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_attribchildremoved.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_nssvgvalue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_interleaved_write.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_reduceright.rb · Exploit
• 🔥 https://github.com/vlad902/annotated-fbi-tbb-exploit · Exploit
• 🔥 https://github.com/argp/cve-2011-3026-firefox · Exploit
• 🔥 https://github.com/mk219533/CVE-2010-1205 · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=718203 · Exploit