← Back

CVE-2012-1966

nvd nist
Published: Jul 18, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Affected (35)

Products: Mozilla: Firefox
Mozilla
1 product
Firefox
Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 11.0
Firefox
Version 12.0
Firefox
Version 12.0 beta6
Firefox
Version 13.0
Firefox
Version 4.0.1
Firefox
Version 4.0
Firefox
Version 4.0 beta10
Firefox
Version 4.0 beta11
Firefox
Version 4.0 beta12
Firefox
Version 4.0 beta1
Firefox
Version 4.0 beta2
Firefox
Version 4.0 beta3
Firefox
Version 4.0 beta4
Firefox
Version 4.0 beta5
Firefox
Version 4.0 beta6
Firefox
Version 4.0 beta7
Firefox
Version 4.0 beta8
Firefox
Version 4.0 beta9
Firefox
Version 5.0.1
Firefox
Version 5.0
Firefox
Version 6.0.1
Firefox
Version 6.0.2
Firefox
Version 6.0
Firefox
Version 7.0.1
Firefox
Version 7.0
Firefox
Version 8.0.1
Firefox
Version 8.0
Firefox
Version 9.0.1
Firefox
Version 9.0
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Version 10.0.1
Firefox
Version 10.0.2
Firefox
Version 10.0.3
Firefox
Version 10.0.4
Firefox
Version 10.0.5
Firefox
Version 10.0

Related CWEs

CWE-264
CWE-264

References (36)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.