CVE-2012-1950: Medium severity firefox vulnerability
Published Jul 18, 2012
·Updated
The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.
Affected Software
41 affected components
Mozilla Firefox=4.0
Mozilla Firefox=4.0-beta1
Mozilla Firefox=4.0-beta10
Mozilla Firefox=4.0-beta11
Mozilla Firefox=4.0-beta12
Mozilla Firefox=4.0-beta2
Mozilla Firefox=4.0-beta3
Mozilla Firefox=4.0-beta4
Mozilla Firefox=4.0-beta5
Mozilla Firefox=4.0-beta6
Mozilla Firefox=4.0-beta7
Mozilla Firefox=4.0-beta8
Mozilla Firefox=4.0-beta9
Mozilla Firefox=4.0.1
Mozilla Firefox=5.0
Mozilla Firefox=5.0.1
Mozilla Firefox=6.0
Mozilla Firefox=6.0.1
Mozilla Firefox=6.0.2
Mozilla Firefox=7.0
Mozilla Firefox=7.0.1
Mozilla Firefox=8.0
Mozilla Firefox=8.0.1
Mozilla Firefox=9.0
Mozilla Firefox=9.0.1
Mozilla Firefox=11.0
Mozilla Firefox=12.0
Mozilla Firefox=12.0-beta6
Mozilla Firefox=13.0
Mozilla Firefox=10.0
Mozilla Firefox=10.0.1
Mozilla Firefox=10.0.2
Mozilla Firefox=10.0.3
Mozilla Firefox=10.0.4
Mozilla Firefox=10.0.5
Mozilla Firefox ESR=10.0
Mozilla Firefox ESR=10.0.1
Mozilla Firefox ESR=10.0.2
Mozilla Firefox ESR=10.0.3
Mozilla Firefox ESR=10.0.4
Mozilla Firefox ESR=10.0.5
Event History
Jul 18, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1950?
CVE-2012-1950 has a medium severity level as it allows remote attackers to spoof the address bar.
2
How do I fix CVE-2012-1950?
To fix CVE-2012-1950, upgrade to Mozilla Firefox version 10.0.6 or later, or use an updated version of Firefox ESR.
3
What versions of Firefox are affected by CVE-2012-1950?
CVE-2012-1950 affects Mozilla Firefox versions 4.x through 13.0 and Firefox ESR 10.x before 10.0.6.
4
Can CVE-2012-1950 be exploited remotely?
Yes, CVE-2012-1950 can be exploited remotely to spoof the address bar during a page load.
5
What impact does CVE-2012-1950 have on users?
CVE-2012-1950 can mislead users by displaying a false URL in the address bar, potentially leading to phishing attacks.