CVE-2012-4184: XSS
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4184?
CVE-2012-4184 has a moderate severity rating, indicating potential risks to affected applications.
How do I fix CVE-2012-4184?
To fix CVE-2012-4184, update affected software such as Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version.
Which software is affected by CVE-2012-4184?
CVE-2012-4184 affects Mozilla Firefox versions before 16.0, Firefox ESR versions before 10.0.8, Thunderbird versions before 16.0, and SeaMonkey versions before 2.13.
What is the impact of CVE-2012-4184?
The impact of CVE-2012-4184 allows remote attackers to access properties of a prototype for a standard class, potentially leading to information disclosure.
Is CVE-2012-4184 still a risk today?
CVE-2012-4184 is no longer a risk if all affected software has been updated to versions that patch this vulnerability.