4.3

CVE-2012-1966

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version4.0
Mozilla ≫ Firefox Version4.0 Updatebeta1
Mozilla ≫ Firefox Version4.0 Updatebeta10
Mozilla ≫ Firefox Version4.0 Updatebeta11
Mozilla ≫ Firefox Version4.0 Updatebeta12
Mozilla ≫ Firefox Version4.0 Updatebeta2
Mozilla ≫ Firefox Version4.0 Updatebeta3
Mozilla ≫ Firefox Version4.0 Updatebeta4
Mozilla ≫ Firefox Version4.0 Updatebeta5
Mozilla ≫ Firefox Version4.0 Updatebeta6
Mozilla ≫ Firefox Version4.0 Updatebeta7
Mozilla ≫ Firefox Version4.0 Updatebeta8
Mozilla ≫ Firefox Version4.0 Updatebeta9
Mozilla ≫ Firefox Version4.0.1
Mozilla ≫ Firefox Version5.0
Mozilla ≫ Firefox Version5.0.1
Mozilla ≫ Firefox Version6.0
Mozilla ≫ Firefox Version6.0.1
Mozilla ≫ Firefox Version6.0.2
Mozilla ≫ Firefox Version7.0
Mozilla ≫ Firefox Version7.0.1
Mozilla ≫ Firefox Version8.0
Mozilla ≫ Firefox Version8.0.1
Mozilla ≫ Firefox Version9.0
Mozilla ≫ Firefox Version9.0.1
Mozilla ≫ Firefox Version11.0
Mozilla ≫ Firefox Version12.0
Mozilla ≫ Firefox Version12.0 Updatebeta6
Mozilla ≫ Firefox Version13.0
Mozilla ≫ Firefox Version10.0
Mozilla ≫ Firefox Version10.0.1
Mozilla ≫ Firefox Version10.0.2
Mozilla ≫ Firefox Version10.0.3
Mozilla ≫ Firefox Version10.0.4
Mozilla ≫ Firefox Version10.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.35% 0.783
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N