Search for vulnerabilities
Vulnerability details: VCID-qeh4-x5vu-aaag
Vulnerability ID VCID-qeh4-x5vu-aaag
Aliases CVE-2012-0455
Summary CVE-2012-0455 Mozilla: XSS with Drag and Drop and Javascript: URL (MFSA 2012-13)
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
System Score Found at
rhas Critical https://access.redhat.com/errata/RHSA-2012:0387
rhas Critical https://access.redhat.com/errata/RHSA-2012:0388
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00344 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00551 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00551 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00551 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.00551 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01014 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
epss 0.01852 https://api.first.org/data/v1/epss?cve=CVE-2012-0455
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=803119
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2012-0455
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2012-13
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00015.html
http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
http://rhn.redhat.com/errata/RHSA-2012-0387.html
http://rhn.redhat.com/errata/RHSA-2012-0388.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0455.json
https://api.first.org/data/v1/epss?cve=CVE-2012-0455
https://bugzilla.mozilla.org/show_bug.cgi?id=704354
http://secunia.com/advisories/48359
http://secunia.com/advisories/48402
http://secunia.com/advisories/48414
http://secunia.com/advisories/48495
http://secunia.com/advisories/48496
http://secunia.com/advisories/48513
http://secunia.com/advisories/48553
http://secunia.com/advisories/48561
http://secunia.com/advisories/48624
http://secunia.com/advisories/48629
http://secunia.com/advisories/48823
http://secunia.com/advisories/48920
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14829
http://www.debian.org/security/2012/dsa-2433
http://www.debian.org/security/2012/dsa-2458
http://www.mandriva.com/security/advisories?name=MDVSA-2012:031
http://www.mandriva.com/security/advisories?name=MDVSA-2012:032
http://www.mozilla.org/security/announce/2012/mfsa2012-13.html
http://www.securityfocus.com/bid/52458
http://www.securitytracker.com/id?1026801
http://www.securitytracker.com/id?1026803
http://www.securitytracker.com/id?1026804
http://www.ubuntu.com/usn/USN-1400-1
http://www.ubuntu.com/usn/USN-1400-2
http://www.ubuntu.com/usn/USN-1400-3
http://www.ubuntu.com/usn/USN-1400-4
http://www.ubuntu.com/usn/USN-1400-5
http://www.ubuntu.com/usn/USN-1401-1
803119 https://bugzilla.redhat.com/show_bug.cgi?id=803119
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox_esr:10.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox_esr:10.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:*:beta5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:seamonkey:*:beta5:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:6.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:6.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:6.0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:8.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:9.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:9.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird_esr:10.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird_esr:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird_esr:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird_esr:10.0.2:*:*:*:*:*:*:*
CVE-2012-0455 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0455
CVE-2012-0455 https://nvd.nist.gov/vuln/detail/CVE-2012-0455
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2012-13 https://www.mozilla.org/en-US/security/advisories/mfsa2012-13
RHSA-2012:0387 https://access.redhat.com/errata/RHSA-2012:0387
RHSA-2012:0388 https://access.redhat.com/errata/RHSA-2012:0388
USN-1400-1 https://usn.ubuntu.com/1400-1/
USN-1400-3 https://usn.ubuntu.com/1400-3/
USN-1401-1 https://usn.ubuntu.com/1401-1/
USN-1401-2 https://usn.ubuntu.com/1401-2/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2012-0455
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.72113
EPSS Score 0.00344
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.