CVE-2012-1965

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the...

4.3 MediumFix available

CVE-2012-1965 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published July 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. Fixed in firefox 0:10.0.6-1.el5_8.

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.

Exploit likelihood

2.21%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2012-1965
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-1965
Updated: 2026-11-02

EUVDEUVD-2012-1974 No score

Record: EUVD-2012-1974
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q7xw-4wrp-fqf4 No score

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the...

Record: GHSA-q7xw-4wrp-fqf4
Weakness: CWE-79
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10071-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:14572-1
Updated: 2026-11-02

Affected products

mozilla firefox

Affected packages

Affected packages
Package	Affected	Fixed
`firefox` Red Hat:enterprise_linux:5::client	before 0:10.0.6-1.el5_8	0:10.0.6-1.el5_8
`firefox-debuginfo` Red Hat:enterprise_linux:5::client	before 0:10.0.6-1.el5_8	0:10.0.6-1.el5_8
`xulrunner` Red Hat:enterprise_linux:5::client	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::client	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`xulrunner` Red Hat:enterprise_linux:5::client_workstation	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`xulrunner-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`firefox` Red Hat:enterprise_linux:5::server	before 0:10.0.6-1.el5_8	0:10.0.6-1.el5_8
`firefox-debuginfo` Red Hat:enterprise_linux:5::server	before 0:10.0.6-1.el5_8	0:10.0.6-1.el5_8
`xulrunner` Red Hat:enterprise_linux:5::server	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8

Show 24 moreShow less

Affected packages
Package	Affected	Fixed
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::server	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`xulrunner-devel` Red Hat:enterprise_linux:5::server	before 0:10.0.6-2.el5_8	0:10.0.6-2.el5_8
`firefox` Red Hat:enterprise_linux:6::client	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::client	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::client	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::client	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::client	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox` Red Hat:enterprise_linux:6::computenode	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::computenode	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::computenode	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox` Red Hat:enterprise_linux:6::server	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::server	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::server	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::server	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::server	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox` Red Hat:enterprise_linux:6::workstation	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::workstation	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::workstation	before 0:10.0.6-1.el6_3	0:10.0.6-1.el6_3
`MozillaFirefox` openSUSE:Tumbleweed	before 50.1.0-1.1	50.1.0-1.1
`firefox-esr` openSUSE:Tumbleweed	before 128.5.1-1.1	128.5.1-1.1