PT-2012-3680
CVE-2012-1950
·
Publicado
2012-07-17
·
Atualizado
2024-12-12
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 4.x through 13.0
Mozilla Firefox ESR versions 10.x before 10.0.6
Description
The issue affects the drag-and-drop implementation, allowing remote attackers to spoof the address bar by canceling a page load.
Recommendations
For Mozilla Firefox versions 4.x through 13.0, update to a version after 13.0.
For Mozilla Firefox ESR versions 10.x before 10.0.6, update to version 10.0.6 or later.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾