Every CVE Search/ Get API key

CVE-2012-1964

The certificate-warning functionality in browser/components/certerror/content/aboutCertError...

4.0 MediumFix available

CVE-2012-1964 is a medium vulnerability (CVSS 4.0) in Mozilla Firefox, published July 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. Fixed in firefox 0:10.0.6-1.el5_8.

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

Exploit likelihood

0.89%Down 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

Record
CVE-2012-1964
CVSS 2.0
4.0 MediumAV:N/AC:H/Au:N/C:P/I:P/A:N
Updated
2026-11-02
CVE List No score

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

Record
CVE-2012-1964
Updated
2026-11-02
EUVDEUVD-2012-1973 No score

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

Record
EUVD-2012-1973
Updated
2026-11-03
GitHub AdvisoriesGHSA-895m-hw9q-p7wj No score

The certificate-warning functionality in browser/components/certerror/content/aboutCertError...

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

Record
GHSA-895m-hw9q-p7wj
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
firefox-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
xulrunner
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
firefox
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
firefox-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
xulrunner
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
Show 32 moreShow less
Affected packages
PackageAffectedFixed
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-devel
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
firefox
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird
Red Hat:rhel_productivity:5
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird-debuginfo
Red Hat:rhel_productivity:5
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 86 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open