Every CVE Search/ Get API key

CVE-2012-1950

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before...

6.4 MediumFix available

CVE-2012-1950 is a medium vulnerability (CVSS 6.4) in Mozilla Firefox, published July 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 78th percentile. Fixed in iceweasel 3.5.16-17.

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

Exploit likelihood

1.84%Down 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.4

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

Record
CVE-2012-1950
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:N/I:P/A:P
Updated
2026-11-02
CVE List No score

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

Record
CVE-2012-1950
Updated
2026-11-02
EUVDEUVD-2012-1959 No score

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

Record
EUVD-2012-1959
Updated
2026-11-03
GitHub AdvisoriesGHSA-wqgg-q2mf-p44h No score

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before...

The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.

Record
GHSA-wqgg-q2mf-p44h
Updated
2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
iceweasel
Debian:6.0
 before 3.5.16-17, plus listed versions
3.5.16-103.5.16-10~bpo50+13.5.16-113.5.16-11~bpo50+13.5.16-12
Show 14 moreShow less
3.5.16-133.5.16-143.5.16-153.5.16-163.5.16-43.5.16-53.5.16-5~bpo50+13.5.16-63.5.16-6~bpo50+13.5.16-73.5.16-7~bpo50+13.5.16-83.5.16-8~bpo50+13.5.16-9
3.5.16-17
icedove
Debian:6.0
 before 3.0.11-1+squeeze12, plus listed versions
3.0.11-13.0.11-1+squeeze13.0.11-1+squeeze103.0.11-1+squeeze113.0.11-1+squeeze2
Show 7 moreShow less
3.0.11-1+squeeze33.0.11-1+squeeze43.0.11-1+squeeze53.0.11-1+squeeze63.0.11-1+squeeze73.0.11-1+squeeze83.0.11-1+squeeze9
3.0.11-1+squeeze12
firefox
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
firefox-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
xulrunner
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
firefox
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
Show 26 moreShow less
Affected packages
PackageAffectedFixed
firefox-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
xulrunner
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-devel
Red Hat:enterprise_linux:5::server
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
firefox
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::client
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::computenode
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::server
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::workstation
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
MozillaFirefox
openSUSE:Tumbleweed
 before 50.1.0-1.1
50.1.0-1.1
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,947 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open