CVE-2012-5837
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges,...
6.8 MediumFix available
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
Exploit likelihood
2.26%Down 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
- Record
CVE-2012-5837- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-79, CWE-94
- Updated
- 2026-11-02
CVE List No score
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
- Record
CVE-2012-5837- Updated
- 2026-11-02
EUVDEUVD-2012-5715 No score
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
- Record
EUVD-2012-5715- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jmrm-6r25-5p6x No score
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges,...
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
- Record
GHSA-jmrm-6r25-5p6x- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 45.5.1-1.1 | 45.5.1-1.1 |
firefox-esropenSUSE:Tumbleweed |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5837 is a medium vulnerability (CVSS 6.8) in Mozilla Firefox, published November 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.26%, the 83rd percentile. Fixed in MozillaFirefox 50.1.0-1.1.
References
ubuntu.com/usn/USN-1638-3
lists.opensuse.org/opensuse-updates/2012-11/msg00093.html
mozilla.org/security/announce/2012/mfsa2012-102.html
osvdb.org/87586
secunia.com/advisories/51434
Show 194 moreShow less
securityfocus.com/bid/56645
bugzilla.mozilla.org/show_bug.cgi?id=800363
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16542
exchange.xforce.ibmcloud.com/vulnerabilities/80180
nvd.nist.gov/vuln/detail/CVE-2012-5837
github.com/advisories/GHSA-jmrm-6r25-5p6x
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 1,898 references. The JSON record has them.