Summary
The host is installed with Mozilla Seamonkey and is prone to multiple vulnerabilities.
Impact
Successful exploitation will let attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site.
Impact Level: Application
Solution
Upgrade to SeaMonkey version 2.13.1 or later
For updates refer to http://www.mozilla.org/projects/seamonkey
Insight
Security wrappers are unwrapped without doing a security check in defaultValue(). This can allow for improper access to the Location object.
Affected
SeaMonkey versions before 2.13.1 on Mac OS X
References
Severity
Classification
-
CVE CVE-2012-4192, CVE-2012-4193 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Acrobat Sandbox Bypass Vulnerability - Aug14 (Windows)
- Adobe AIR Code Execution and DoS Vulnerabilities Nov13 (Windows)
- Adobe Acrobat Multiple Unspecified Vulnerabilities -01 May13 (Windows)
- Adobe Acrobat Multiple Vulnerabilities - 01 May14 (Windows)
- Adobe Flash Player Buffer Overflow Vulnerability - Apr14 (Windows)