PT-2012-3680 · Mozilla+3 · Firefox Esr+4

Mario Gomes · Published 2012-07-17 · Updated 2024-12-12 · CVE-2012-1950

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 13.0 Mozilla Firefox ESR versions 10.x before 10.0.6

Description The issue affects the drag-and-drop implementation, allowing remote attackers to spoof the address bar by canceling a page load.

Recommendations For Mozilla Firefox versions 4.x through 13.0, update to a version after 13.0. For Mozilla Firefox ESR versions 10.x before 10.0.6, update to version 10.0.6 or later.

Fix

Related Identifiers

CESA-2012_1088

CVE-2012-1950

DSA-2514-1

DSA-2528-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2012:1088

RHSA-2012_1088

Affected Products

Centos

Firefox

Firefox Esr

Red Hat

Suse

References · 2120

• http://mozilla.org/security/announce/2012/mfsa2012-43.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1088.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954 · Security Note
• http://debian.org/security/2012/dsa-2528 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948 · Security Note
• http://ubuntu.com/usn/USN-1509-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-1950 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1966 · Security Note