CVE-2012-0450
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak...
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
Exploit likelihood
What each source reports
NVD Score used
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
- Record
CVE-2012-0450- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
- Record
CVE-2012-0450- Updated
- 2026-11-02
EUVDEUVD-2012-0482 No score
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
- Record
EUVD-2012-0482- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h77w-4p5f-2cg9 No score
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak...
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.
- Record
GHSA-h77w-4p5f-2cg9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0450 is a low vulnerability (CVSS 2.1) in Mozilla Firefox, published February 1, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. No source names a fixed version.
References
mozilla.org/security/announce/2012/mfsa2012-09.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14670
osvdb.org/78741
exchange.xforce.ibmcloud.com/vulnerabilities/72869
bugzilla.mozilla.org/show_bug.cgi?id=716868
mandriva.com/security/advisories?name=MDVSA-2012:013
lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html
nvd.nist.gov/vuln/detail/CVE-2012-0450
github.com/advisories/GHSA-h77w-4p5f-2cg9