Published: 18/07/2012 Updated: 29/12/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Mozilla Firefox 4.x up to and including 13.0 and Firefox ESR 10.x prior to 10.0.6 do not properly establish the security context of a feed: URL, which allows remote malicious users to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 4.0
mozilla firefox 6.0.1
mozilla firefox 7.0.1
mozilla firefox 12.0
mozilla firefox 13.0
mozilla firefox 5.0
mozilla firefox 5.0.1
mozilla firefox 8.0.1
mozilla firefox 9.0.1
mozilla firefox 4.0.1
mozilla firefox 6.0
mozilla firefox 6.0.2
mozilla firefox 9.0
mozilla firefox 11.0
mozilla firefox 7.0
mozilla firefox 8.0
mozilla firefox esr 10.0.5
mozilla firefox esr 10.0.2
mozilla firefox esr 10.0.3
mozilla firefox esr 10.0.4
mozilla firefox esr 10.0
mozilla firefox esr 10.0.1

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulne ...

This update provides compatible ubufox packages for the latest Firefox ...

Several security issues were fixed in Firefox ...

Mozilla Foundation Security Advisory 2012-55 feed: URLs with an innerURI inherit security context of page Announced July 17, 2012 Reporter Mario Gomes, Soroush Dalili Impact Moderate Products Firefox, Firefox ESR Fixed ...

CWE-79 https://bugzilla.mozilla.org/show_bug.cgi?id=758990 http://www.mozilla.org/security/announce/2012/mfsa2012-55.html http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html http://rhn.redhat.com/errata/RHSA-2012-1088.html http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html http://www.ubuntu.com/usn/USN-1509-2 http://www.securitytracker.com/id?1027256 http://secunia.com/advisories/49965 http://secunia.com/advisories/49972 http://www.ubuntu.com/usn/USN-1509-1 http://secunia.com/advisories/49992 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17001 http://www.securityfocus.com/bid/54579 http://secunia.com/advisories/49979 http://osvdb.org/84012 https://access.redhat.com/errata/RHSA-2012:1088 https://nvd.nist.gov https://usn.ubuntu.com/1509-2/

CVE-2012-1965

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect