Lucene search
Mozilla FoundationMFSA2012-46HistoryJul 17, 2012 - 12:00 a.m.
XSS through data: URLs — Mozilla
2012-07-1700:00:00
Mozilla Foundation
www.mozilla.org
23
0.004 Low
EPSS
Percentile
73.6%
Mozilla security researcher moz_bug_r_a4 reported a cross-site scripting (XSS) attack through the context menu using a data: URL. In this issue, context menu functionality (“View Image”, “Show only this frame”, and “View background image”) are disallowed in a javascript: URL but allowed in a data: URL, allowing for XSS. This can lead to arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 14 | |
| firefox esr | lt | 10.0.6 |
Related
ubuntucve
ubuntucve
CVE-2012-1966
2012-07-17 00:00:00
cve
cve
CVE-2012-1966
2012-07-18 10:26:00
prion
prion
Cross site scripting
2012-07-18 10:26:00
cvelist
cvelist
CVE-2012-1966
2012-07-18 10:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-46) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities (Jul 2012) - Windows
2012-07-23 00:00:00
Mozilla Firefox Multiple Vulnerabilities - July12 (Windows)
2012-07-23 00:00:00
seebug
seebug
Mozilla Firefox跨站脚本执行漏洞(CVE-2012-1966)
2012-07-20 00:00:00
debian
debian
[SECURITY] [DSA 2514-1] iceweasel security update
2012-07-17 20:04:25
osv
osv
iceweasel - several vulnerabilities
2012-07-17 00:00:00
nessus
nessus
Debian DSA-2514-1 : iceweasel - several vulnerabilities
2012-07-18 00:00:00
RHEL 5 / 6 : firefox (RHSA-2012:1088)
2012-07-18 00:00:00
Firefox 10.0.x < 10.0.6 Multiple Vulnerabilities
2012-07-19 00:00:00
oraclelinux
oraclelinux
firefox security update
2012-07-17 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:42:26
Denial Of Service (DoS)
2019-05-02 04:42:27
Cross Site Scripting (XSS)
2019-05-02 04:42:26
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-07-17 00:00:00
centos
centos
firefox, xulrunner security update
2012-07-17 20:41:16
ubuntu
ubuntu
ubufox update
2012-07-18 00:00:00
Firefox vulnerabilities
2012-07-17 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-08-13 00:00:00
redhat
redhat
(RHSA-2012:1088) Critical: firefox security update
2012-07-17 00:00:00
suse
suse
xulrunner to 14.0.1 (critical)
2012-07-30 17:08:56
MozillaFirefox to 14.0.1 (critical)
2012-07-23 14:08:16
Security update for Mozilla Firefox (important)
2012-07-21 01:08:17
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00