CVE-2012-3973
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote...
CVE-2012-3973 is a high vulnerability (CVSS 7.6) in Mozilla Firefox, published August 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.93%, the 92nd percentile. Fixed in MozillaFirefox 50.1.0-1.1.
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
Exploit likelihood
What each source reports
NVD Score used
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
- Record
CVE-2012-3973- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
- Record
CVE-2012-3973- Updated
- 2026-11-02
EUVDEUVD-2012-3917 No score
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
- Record
EUVD-2012-3917- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rrwm-vm8h-54hm No score
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote...
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
- Record
GHSA-rrwm-vm8h-54hm- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
firefox-esropenSUSE:Tumbleweed |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17039
bugzilla.mozilla.org/show_bug.cgi?id=757128
mozilla.org/security/announce/2012/mfsa2012-66.html
securityfocus.com/bid/55308
osvdb.org/85005
ubuntu.com/usn/USN-1548-1
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html
nvd.nist.gov/vuln/detail/CVE-2012-3973
github.com/advisories/GHSA-rrwm-vm8h-54hm
suse.com/security/cve/CVE-2008-5913
Left out here: 1,867 references. The JSON record has them.