CVE-2012-0475

low
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.

References

http://secunia.com/advisories/48972

http://secunia.com/advisories/49047

http://secunia.com/advisories/49055

http://www.mozilla.org/security/announce/2012/mfsa2012-28.html

http://www.securityfocus.com/bid/53230

https://bugzilla.mozilla.org/show_bug.cgi?id=694576

https://exchange.xforce.ibmcloud.com/vulnerabilities/75153

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16279

Details

Source: MITRE

Published: 2012-04-25

Updated: 2017-12-19

Type: CWE-264

Risk Information

CVSS v2

Base Score: 2.6

Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Impact Score: 2.9

Exploitability Score: 4.9

Severity: LOW

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:*

Configuration 2

OR

cpe:2.3:a:mozilla:thunderbird:5.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:6.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:7.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:8.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:9.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:10.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:11.0:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.5.0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.5.0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:1.5.0.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:alpha1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:alpha2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:alpha3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.1:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.2:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.5:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.8:beta6:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.9:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:2.9:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:seamonkey:*:beta3:*:*:*:*:*:* versions up to 2.9 (inclusive)

Tenable Plugins

View all (19 total)

IDNameProductFamilySeverity
74612openSUSE Security Update : MozillaFirefox / MozillaThunderbird / seamonkey / etc (openSUSE-SU-2012:0567-1)NessusSuSE Local Security Checks
critical
801359Mozilla Firefox <= 11 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
high
801320Mozilla SeaMonkey 2.x < 2.9.0 Multiple VulnerabilitiesLog Correlation EngineWeb Clients
high
801261Mozilla Thunderbird < 12 Multiple VulnerabilitiesLog Correlation EngineSMTP Clients
high
6792Mozilla Thunderbird < 12.0 Multiple VulnerabilitiesNessus Network MonitorSMTP Clients
high
6791SeaMonkey 2.x < 2.9.0 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
6790Mozilla Firefox < 12.0 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
63402GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)NessusGentoo Local Security Checks
critical
59354SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 8154)NessusSuSE Local Security Checks
critical
59015Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : thunderbird vulnerabilities (USN-1430-3)NessusUbuntu Local Security Checks
critical
58973SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6224)NessusSuSE Local Security Checks
critical
58923Ubuntu 10.04 LTS / 11.04 / 11.10 : ubufox update (USN-1430-2)NessusUbuntu Local Security Checks
critical
58922Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : firefox vulnerabilities (USN-1430-1)NessusUbuntu Local Security Checks
critical
58901SeaMonkey < 2.9.0 Multiple VulnerabilitiesNessusWindows
high
58900Mozilla Thunderbird < 12.0 Multiple VulnerabilitiesNessusWindows
high
58898Firefox < 12.0 Multiple VulnerabilitiesNessusWindows
high
58896Thunderbird < 12.0 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
high
58894Firefox < 12.0 Multiple Vulnerabilities (Mac OS X)NessusMacOS X Local Security Checks
high
58864FreeBSD : mozilla -- multiple vulnerabilities (380e8c56-8e32-11e1-9580-4061862b8c22)NessusFreeBSD Local Security Checks
critical