The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-11-21 04:55
Updated : 2017-09-18 18:35
NVD link : CVE-2012-4203
Mitre link : CVE-2012-4203
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
mozilla
- firefox