Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2012-08-29T10:00:00

Updated: 2017-09-18T12:57:01

Reserved: 2012-07-11T00:00:00


Link: CVE-2012-3965

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2012-08-29T10:56:40.660

Modified: 2017-09-19T01:35:12.653


Link: CVE-2012-3965

JSON object: View

cve-icon Redhat Information

No data.

CWE