The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2012-11-21 12:55
Updated : 2017-09-19 01:35
NVD link : CVE-2012-4203
Mitre link : CVE-2012-4203
CVE.ORG link : CVE-2012-4203
JSON object : View
Products Affected
mozilla
- firefox
CWE
CWE-264
Permissions, Privileges, and Access Controls