CVE-2012-1950

no score yetEPSS 1.8%

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
Published: 2012-07-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html
http://osvdb.org/84008
http://rhn.redhat.com/errata/RHSA-2012-1088.html

Check your stack JSON