Every CVE Search/ Get API key

CVE-2012-1952

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x...

9.3 High

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

Exploit likelihood

3.67%Down 4.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

Record
CVE-2012-1952
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

Record
CVE-2012-1952
Updated
2026-11-02
EUVDEUVD-2012-1961 No score

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

Record
EUVD-2012-1961
Updated
2026-11-03
GitHub AdvisoriesGHSA-jfr6-2c38-mp7q No score

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x...

The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.

Record
GHSA-jfr6-2c38-mp7q
Updated
2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10218-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10230-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
firefox-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
xulrunner
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
firefox
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
firefox-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
xulrunner
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
Show 34 moreShow less
Affected packages
PackageAffectedFixed
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
xulrunner-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 17 CVEs
 before 0:10.0.6-2.el5_8
0:10.0.6-2.el5_8
firefox
Red Hat:enterprise_linux:6::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::computenode
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::computenode
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox
Red Hat:enterprise_linux:6::workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner
Red Hat:enterprise_linux:6::workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
xulrunner-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 17 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird
Red Hat:enterprise_linux:5::client
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird
Red Hat:rhel_productivity:5
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird-debuginfo
Red Hat:rhel_productivity:5
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el5_8
0:10.0.6-1.el5_8
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 14 CVEs
 before 0:10.0.6-1.el6_3
0:10.0.6-1.el6_3
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 899 CVEs
 before 50.1.0-1.1
50.1.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 560 CVEs
 before 45.5.1-1.1
45.5.1-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1952 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published July 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.67%, the 89th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 841 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open