Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2012-4184

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 16.0之前版本,Thunderbird ESR 10.0.8之前的10.x版本，Thunderbird 16.0之前版本,以及 SeaMonkey 2.13之前版本中的Chrome Object Wrapper (COW) 实现上存在漏洞。该漏洞源于程序未正确地限制为标准类所设原型的属性的访问。通过借助特制的网站，远程攻击者可利用该漏洞以chrome权限执行任意JavaS

AI Predicted 9.0 Difficulty: Easy EPSS 1.80% · P77 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2012-4184

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Mozilla Firefox/Thunderbird/SeaMonkey 权限许可和访问控制漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2012-4184

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2012-4184

请登录查看更多情报信息。

Vendor Advisories for CVE-2012-4184 (12)

🔗 https://bugzilla.mozilla.org/show_bug.cgi?id=780370 x_refsource_CONFIRM
🔗 http://www.mozilla.org/security/announce/2012/mfsa2012-83.html x_refsource_CONFIRM
🔗 http://osvdb.org/86113 vdb-entry x_refsource_OSVDB
🔗 http://secunia.com/advisories/50904 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/56120 vdb-entry x_refsource_BID
🔗 http://secunia.com/advisories/50984 third-party-advisory x_refsource_SECUNIA
🔗 http://secunia.com/advisories/50892 third-party-advisory x_refsource_SECUNIA
🔗 http://secunia.com/advisories/55318 third-party-advisory x_refsource_SECUNIA
🔗 http://www.ubuntu.com/usn/USN-1611-1 vendor-advisory x_refsource_UBUNTU
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2012:163 vendor-advisory x_refsource_MANDRIVA
🔗 http://rhn.redhat.com/errata/RHSA-2012-1351.html vendor-advisory x_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilities/79154 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2012-4184 (1)

🔗 http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html vendor-advisory x_refsource_SUSE

https://www.cve.org/CVERecord?id=CVE-2012-4184

Same Patch Batch · n/a · 2012-10-10 · 40 CVEs total

CVE-2012-4179		Mozilla Firefox/SeaMonkey/Thunderbird 资源管理错误漏洞
CVE-2012-3987		Mozilla Firefox 权限许可和访问控制漏洞
CVE-2012-3988		Mozilla Firefox/SeaMonkey/Thunderbird 资源管理错误漏洞
CVE-2012-3989		Mozilla Firefox/SeaMonkey/Thunderbird 资源管理错误漏洞
CVE-2012-3990		Mozilla Firefox/SeaMonkey/Thunderbird 资源管理错误漏洞
CVE-2012-3991		Mozilla Firefox/SeaMonkey/Thunderbird 权限许可和访问控制问题漏洞
CVE-2012-3992		Mozilla Firefox/SeaMonkey/Thunderbird 权限许可和访问控制问题漏洞
CVE-2012-3993		Mozilla Firefox/SeaMonkey/Thunderbird 设计错误漏洞
CVE-2012-3994		Mozilla Firefox/SeaMonkey/Thunderbird 跨站脚本漏洞
CVE-2012-3995		Mozilla Firefox/SeaMonkey/Thunderbird 缓冲区错误漏洞
CVE-2012-3986		Mozilla Firefox/SeaMonkey/Thunderbird 权限许可和访问控制问题漏洞
CVE-2012-4180		Mozilla Firefox/SeaMonkey/Thunderbird 缓冲区错误漏洞
CVE-2012-4181		Mozilla Firefox/SeaMonkey/Thunderbird 资源管理错误漏洞
CVE-2012-4182		Mozilla Firefox/SeaMonkey/Thunderbird 资源管理错误漏洞
CVE-2012-4183		Mozilla Firefox/Thunderbird/SeaMonkey 资源管理错误漏洞
CVE-2012-4185		Mozilla Firefox/Thunderbird/SeaMonkey ‘nsCharTraits::length’函数缓冲区错误漏洞
CVE-2012-4186		Mozilla Firefox/Thunderbird/SeaMonkey 缓冲区错误漏洞
CVE-2012-4187		Mozilla Firefox/SeaMonkey/Thunderbird 缓冲区错误漏洞
CVE-2012-4188		Mozilla Firefox/SeaMonkey/Thunderbird ‘Convolve3x3’函数缓冲区错误漏洞
CVE-2012-5354		Mozilla Firefox/SeaMonkey/Thunderbird 设计错误漏洞

Showing top 20 of 40 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2012-4184

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2012-4184

Quick assessment

I. Basic Information for CVE-2012-4184

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2012-4184

III. Intelligence Information for CVE-2012-4184

Vendor Advisories for CVE-2012-4184 (12)

Mailing List Discussions for CVE-2012-4184 (1)

Same Patch Batch · n/a · 2012-10-10 · 40 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2012-4184

Leave a comment