← Back

CVE-2012-1965

nvd nist
Published: Jul 18, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.

Affected (35)

Products: Mozilla: Firefox
Mozilla
1 product
Firefox
Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 11.0
Firefox
Version 12.0
Firefox
Version 12.0 beta6
Firefox
Version 13.0
Firefox
Version 4.0.1
Firefox
Version 4.0
Firefox
Version 4.0 beta10
Firefox
Version 4.0 beta11
Firefox
Version 4.0 beta12
Firefox
Version 4.0 beta1
Firefox
Version 4.0 beta2
Firefox
Version 4.0 beta3
Firefox
Version 4.0 beta4
Firefox
Version 4.0 beta5
Firefox
Version 4.0 beta6
Firefox
Version 4.0 beta7
Firefox
Version 4.0 beta8
Firefox
Version 4.0 beta9
Firefox
Version 5.0.1
Firefox
Version 5.0
Firefox
Version 6.0.1
Firefox
Version 6.0.2
Firefox
Version 6.0
Firefox
Version 7.0.1
Firefox
Version 7.0
Firefox
Version 8.0.1
Firefox
Version 8.0
Firefox
Version 9.0.1
Firefox
Version 9.0
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 10.0.1
Firefox
Version 10.0.2
Firefox
Version 10.0.3
Firefox
Version 10.0.4
Firefox
Version 10.0.5
Firefox
Version 10.0

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (32)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.