CVE-2012-1945 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2012-1945

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-05 Jun, 2012 | 23:55

Updated At-11 Apr, 2025 | 00:51

Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	2.9	LOW	AV:A/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 2.9

Base severity: LOW

Vector:

AV:A/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0

cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>4.0.1

cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>5.0

cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>5.0.1

cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>6.0

cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>6.0.1

cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>6.0.2

cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>7.0

cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>7.0.1

cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>8.0

cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>8.0.1

cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>9.0

cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>9.0.1

cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>10.0

cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>10.0.1

cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>10.0.2

cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>10.0.3

cpe:2.3:a:mozilla:firefox:10.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>10.0.4

cpe:2.3:a:mozilla:firefox:10.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>11.0

cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>12.0

cpe:2.3:a:mozilla:firefox:12.0:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>12.0

cpe:2.3:a:mozilla:firefox:12.0:beta6:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>Versions up to 2.9(inclusive)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0

cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0

cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0

cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1

cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1

cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1

cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2012-0710.html	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2012-0715.html	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:088	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-37.html	cve@mitre.org	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=670514	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16743	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2012-0710.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2012-0715.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2012:088	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-37.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=670514	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16743	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-0710.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-0715.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:088

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-37.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=670514

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16743

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-0710.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://rhn.redhat.com/errata/RHSA-2012-0715.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2012:088

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2012/mfsa2012-37.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=670514

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16743

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A