CVE-2012-3993Firefox Vulnerability
Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)
Published Oct 9, 2012 · Updated Aug 6, 2024
Key Facts
Patch immediately- CVE-2012-3993 is a critical-severity vulnerability (CVSS 9.3 v2) affecting Firefox (Mozilla), Seamonkey (Mozilla), Thunderbird (Mozilla) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 43% probability of exploitation in the next 30 days.
- Fixed versions are available, including Firefox 0:10.0.8-1.el5_8, Firefox 0:10.0.8-1.el6_3, Firefox 10.0.8-1.0.2.el5_8.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS (30-day exploit likelihood)
43%
Higher than 98.6% of all scored CVEs
Exploit maturity
Weaponized
ATLAS score
63/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Weaponized
Public exploit code
2
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisorySUSE-SU-2012:1351
- advisoryRHSA-2012:1351
- advisoryRHSA-2012:1350
- advisoryRHSA-2012:1351
- advisoryhttps://bugzilla.mozilla.org/show_bug.cgi?id=768101
- advisory50856
Description
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
Affected Products
410 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| FirefoxMozilla | 1.0, 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6 | 15.0.1 |
| SeamonkeyMozilla | 2.0, 2.0.1, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.2 | 2.13 |
| ThunderbirdMozilla | 1.0, 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 1.0.1, 1.0.2 | 15.0.1 |
| Thunderbird EsrMozilla | 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7 | n/a |
| xulrunner-develoracle | See advisory | 10.0.8-1.0.1.el5_8 |
Patched Releases
Firefox
0:10.0.8-1.el5_8, 0:10.0.8-1.el6_3, 10.0.8-1.0.2.el5_8, 10.0.8-1.0.2.el6_3, 15.0.1
firefox-esr
128.5.1-1.1
firefox-esr-branding-upstream
128.5.1-1.1
firefox-esr-translations-common
128.5.1-1.1
firefox-esr-translations-other
128.5.1-1.1
Seamonkey
2.13, 2.40-6.1
Thunderbird
15.0.1, 0:10.0.8-1.el5_8, 0:10.0.8-1.el6_3, 10.0.8-1.0.1.el6_3, 10.0.8-1.0.2.el5_8
MozillaFirefox
50.1.0-1.1
MozillaFirefox-branding-upstream
50.1.0-1.1
MozillaFirefox-buildsymbols
50.1.0-1.1
MozillaFirefox-devel
50.1.0-1.1
MozillaFirefox-translations-common
50.1.0-1.1
MozillaFirefox-translations-other
50.1.0-1.1
MozillaThunderbird
45.5.1-1.1
MozillaThunderbird-buildsymbols
45.5.1-1.1
MozillaThunderbird-devel
45.5.1-1.1
MozillaThunderbird-translations-common
45.5.1-1.1
MozillaThunderbird-translations-other
45.5.1-1.1
seamonkey-dom-inspector
2.40-6.1
seamonkey-irc
2.40-6.1
seamonkey-translations-common
2.40-6.1
seamonkey-translations-other
2.40-6.1
xulrunner
0:10.0.8-1.el5_8, 0:10.0.8-1.el6_3, 10.0.8-1.0.1.el5_8, 10.0.8-1.0.1.el6_3
xulrunner-devel
10.0.8-1.0.1.el5_8, 10.0.8-1.0.1.el6_3
Timeline
Publicly disclosed
Oct 9, 2012
Last updated
Aug 6, 2024
Weakness Type
- CWE-269 Improper Privilege Management
References
- advisorySUSE-SU-2012:1351
- advisoryRHSA-2012:1351
- advisoryRHSA-2012:1350
- advisoryRHSA-2012:1351
- advisorybugzilla.mozilla.org · show_bug.cgi
FAQ
Common Questions.
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary Ja…
Affected: Firefox (Mozilla) versions 1.0, 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6; Seamonkey (Mozilla) versions 2.0, 2.0.1, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.2; Thunderbird (Mozilla) versions 1.0, 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 1.0.1, 1.0.2, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Firefox 0:10.0.8-1.el5_8, Firefox 0:10.0.8-1.el6_3, Firefox 10.0.8-1.0.2.el5_8.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2012-3993 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo