PT-2012-3680
CVE-2012-1950
·
Published
2012-07-17
·
Updated
2024-12-12
Description by
CVSS 2.0
6.4
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 4.x through 13.0
Mozilla Firefox ESR versions 10.x before 10.0.6
Description
The issue affects the drag-and-drop implementation, allowing remote attackers to spoof the address bar by canceling a page load.
Recommendations
For Mozilla Firefox versions 4.x through 13.0, update to a version after 13.0.
For Mozilla Firefox ESR versions 10.x before 10.0.6, update to version 10.0.6 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾