CVE-2012-1945

Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10…

published June 5, 2012

CVSS
—
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.4th percentile
Published
2012-06-05T23:00Z
EPSS history
Timeline
  • 05 JUN 23:00Z
    Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10…
    cvelistv5