Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-1966

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2012-1966
Last Modified 10 Oct 2014 12:51:47
Published 18 Jul 2012 06:26:49
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2012-1966

Summary

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Vulnerable Systems

Application

  • Mozilla Firefox 11.0

  • Mozilla Firefox 12.0

  • Mozilla Firefox 13.0

  • Mozilla Firefox 4.0

  • Mozilla Firefox 4.0.1

  • Mozilla Firefox 5.0

  • Mozilla Firefox 5.0.1

  • Mozilla Firefox 6.0

  • Mozilla Firefox 6.0.1

  • Mozilla Firefox 6.0.2

  • Mozilla Firefox 7.0

  • Mozilla Firefox 7.0.1

  • Mozilla Firefox 8.0

  • Mozilla Firefox 8.0.1

  • Mozilla Firefox 9.0

  • Mozilla Firefox 9.0.1

  • Mozilla Firefox Esr 10.0

  • Mozilla Firefox Esr 10.0.1

  • Mozilla Firefox Esr 10.0.2

  • Mozilla Firefox Esr 10.0.3

  • Mozilla Firefox Esr 10.0.4

  • Mozilla Firefox Esr 10.0.5


References

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=734076

CONFIRM - http://www.mozilla.org/security/announce/2012/mfsa2012-46.html

SUSE - openSUSE-SU-2012:0899

REDHAT - RHSA-2012:1088

SUSE - SUSE-SU-2012:0896

SUSE - SUSE-SU-2012:0895

DEBIAN - DSA-2514

UBUNTU - USN-1509-2

UBUNTU - USN-1509-1

SECTRACK - 1027256

SECUNIA - 49992

SECUNIA - 49972

SECUNIA - 49965

Related Patches

SUN145200-12 Solaris 10 SPARC: Thunderbird patch (Rev 2)

SUN145201-12 Solaris 10 x86: Thunderbird patch (Rev 2)

Red Hat 2012:1088-01 RHSA Critical: firefox security update for RHEL 5 x86

Red Hat 2012:1088-01 RHSA Critical: firefox security update for RHEL 5 x86_64

Novell SUSE 2012:6574 firefox-201207 security update for SLE 11 SP1 i586

Novell SUSE 2012:6574 firefox-201207 security update for SLE 11 SP1 x86_64

Novell SUSE 2012:8226 firefox-201207 security update for SLE 10 SP4 i586

Novell SUSE 2012:8226 firefox-201207 security update for SLE 10 SP4 x86_64

Mozilla Firefox ESR 10.0.6 for Mac OS X (Update) (See Note)

Mozilla Firefox (en-us) 14.0.1 for Windows (Update) (See Notes)

Mozilla Firefox 14.0.1 for Mac OS X (Update) (See Note)

Mozilla Firefox ESR (en-us) 10.0.6 for Windows (Update) (See Notes)


Last Updated: 27 May 2016 10:54:54