PT-2012-3680

CVE-2012-1950

·

Published

2012-07-17

·

Updated

2024-12-12

Description by

CVSS 2.0
6.4
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 13.0 Mozilla Firefox ESR versions 10.x before 10.0.6
Description The issue affects the drag-and-drop implementation, allowing remote attackers to spoof the address bar by canceling a page load.
Recommendations For Mozilla Firefox versions 4.x through 13.0, update to a version after 13.0. For Mozilla Firefox ESR versions 10.x before 10.0.6, update to version 10.0.6 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2012-1950
CESA-2012_1088
DSA-2514-1
DSA-2528-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2012:1088
RHSA-2012_1088
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com