CVE-2012-0455

Description

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a DragAndDropJacking issue.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
1.547

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Mozilla Firefox (x64) 9.0.1Windows
Multiple vulnerabilities affected in Mozilla Firefox ESR (x64) 10.2Windows
Multiple vulnerabilities affected in Mozilla Firefox ESR 10.2Windows
Multiple vulnerabilities affected in Mozilla Thunderbird 9.0.1Windows
Multiple vulnerabilities affected in Mozilla Thunderbird ESR 10.0.2Windows
Multiple vulnerabilities affected in Mozilla_Firefox 9.0.1Windows
Multiple vulnerabilities affected in SeaMonkey 2.7Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 7.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 7.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 5.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 6.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 6.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 6.0.2Windows
Multiple Vulnerabilities are affected in Mozilla Firefox ESR (x64) 10.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox ESR (x64) 10.2Windows
Multiple Vulnerabilities are affected in Mozilla Firefox ESR 10.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox ESR 10.2Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 8.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 9.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 9.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 10.0Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 10.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird ESR 10.0.2Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.1.19Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.27Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 4.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 4.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 5.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 5.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 6.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 6.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 6.0.2Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 7.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 8.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 8.0.1Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 9.0Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 9.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.27Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 4.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 4.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 5.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 5.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 6.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 6.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 6.0.2Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 7.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 8.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 8.0.1Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 9.0Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 9.0.1Windows
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (119.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (119.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (118.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (118.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (118.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (117.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (117.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (116.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (116.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (116.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (116.0.3)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (115.0.3)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (114.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (114.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (114.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (113.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (113.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (113.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (112.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (112.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (112.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (110.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (110.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (111.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (111.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 3.6.28Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.2.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.3.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.3.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.4.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.4.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.5.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.5.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.6.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.7.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.8.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.8.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.9.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.10.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.10.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.11.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.11.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.12.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.12.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.13.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (115.14.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (128.11.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (128.11.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (78.11.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (102.11.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (102.11.1)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (102.11.2)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 3.1.20Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac 10.0.3Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 4.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 4.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 5.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 6.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 5.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 6.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 6.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 5.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 6.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 7.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 6.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 6.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 7.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 8.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 8.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 9.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 9.0.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 10.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 10.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 8.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 9.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 10.0Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 10.0.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 10.0.2Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 9.0Mac
Multiple Vulnerabilities are affected in SeaMonkey For Mac 2.7-beta5Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 10.1Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 10.2Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 10.1Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 10.2Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 3.6.27Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 3.1.19Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 10.0.3Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343016Mozilla Firefox (x64) (132.0.2)
PATCH-310844Mozilla Firefox ESR (x64) (60.9.0)
PATCH-310843Mozilla Firefox ESR (60.9.0)
PATCH-315938Mozilla Thunderbird (68.12.0)
PATCH-343015Mozilla Firefox (132.0.2)
PATCH-341197SeaMonkey (2.53.19)
PATCH-334458Mozilla Firefox (x64) (120.0)
PATCH-334457Mozilla Firefox (120.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611088SeaMonkey For Mac (2.53.21)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234