---
title: "CVE-2012-0458\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2012-0458?format=md
keywords: index, follow
---

# CVE-2012-0458

Publication date 14 March 2012

Last updated 24 July 2024

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before
10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR
10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict
setting the home page through the dragging of a URL to the home button,
which allows user-assisted remote attackers to execute arbitrary JavaScript
code with chrome privileges via a javascript: URL that is later interpreted
in the about:sessionrestore context.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| firefox | 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 11.10 oneiric | Fixed 11.0+build1-0ubuntu0.11.10.1 |
| 11.04 natty | Fixed 11.0+build1-0ubuntu0.11.04.1 |
| 10.10 maverick | Fixed 11.0+build1-0ubuntu0.10.10.2 |
| 10.04 LTS lucid | Fixed 11.0+build1-0ubuntu0.10.04.2 |
| 8.04 LTS hardy | Ignored end of life |
| seamonkey | 13.10 saucy | Not in release |
| 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Ignored end of life |
| 11.04 natty | Ignored end of life |
| 10.10 maverick | Ignored end of life |
| 10.04 LTS lucid | Ignored end of life |
| 8.04 LTS hardy | Ignored end of life |
| thunderbird | 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Not affected |
| 12.04 LTS precise | Not affected |
| 11.10 oneiric | Fixed 11.0+build1-0ubuntu0.11.10.1 |
| 11.04 natty | Fixed 3.1.20+build1+nobinonly-0ubuntu0.11.04.1 |
| 10.10 maverick | Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.10.1 |
| 10.04 LTS lucid | Fixed 3.1.20+build1+nobinonly-0ubuntu0.10.04.1 |
| 8.04 LTS hardy | Ignored end of life |
| xulrunner-1.9.2 | 13.10 saucy | Not in release |
| 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not in release |
| 11.04 natty | Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.11.04.1 |
| 10.10 maverick | Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.10.1 |
| 10.04 LTS lucid | Fixed 1.9.2.28+build1+nobinonly-0ubuntu0.10.04.1 |
| 8.04 LTS hardy | Ignored end of life |
| xulrunner-2.0 | 13.10 saucy | Not in release |
| 13.04 raring | Not in release |
| 12.10 quantal | Not in release |
| 12.04 LTS precise | Not in release |
| 11.10 oneiric | Not in release |
| 11.04 natty | Ignored end of life |
| 10.10 maverick | Not in release |
| 10.04 LTS lucid | Not in release |
| 8.04 LTS hardy | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0458)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2012-0458)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2012-0458)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2012-0458)

### Related Ubuntu Security Notices (USN)

+ [USN-1401-2](https://usn.ubuntu.com/USN-1401-2)
+ Thunderbird vulnerabilities
+ 23 March 2012

+ [USN-1401-1](https://usn.ubuntu.com/USN-1401-1)
+ Xulrunner vulnerabilities
+ 19 March 2012

+ [USN-1400-1](https://usn.ubuntu.com/USN-1400-1)
+ Firefox vulnerabilities
+ 16 March 2012

+ [USN-1400-3](https://usn.ubuntu.com/USN-1400-3)
+ Thunderbird vulnerabilities
+ 21 March 2012

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2012-0458>