CVE-2012-4196

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2,...

6.4 MediumFix available

CVE-2012-4196 is a medium vulnerability (CVSS 6.4) in Mozilla Firefox, published October 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.29%, the 88th percentile. Fixed in firefox 0:10.0.10-1.el5_8.

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object.

Exploit likelihood

3.29%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.4

Record: CVE-2012-4196
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:P/I:P/A:N
Weakness: CWE-74
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4196
Updated: 2026-11-02

EUVDEUVD-2012-4140 No score

Record: EUVD-2012-4140
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wmx4-v463-6726 No score

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2,...

Record: GHSA-wmx4-v463-6726
Weakness: CWE-74
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10071-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10218-1 No score

seamonkey-2.40-6.1 on GA media

These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10218-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10230-1 No score

MozillaThunderbird-45.5.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10230-1
Updated: 2026-11-02

Affected products

Show 1 moreShow less

suse linux enterprise software development kit

Affected packages

Affected packages
Package	Affected	Fixed
`firefox` Red Hat:enterprise_linux:5::client	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`firefox-debuginfo` Red Hat:enterprise_linux:5::client	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner` Red Hat:enterprise_linux:5::client	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::client	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner` Red Hat:enterprise_linux:5::client_workstation	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`firefox` Red Hat:enterprise_linux:5::server	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`firefox-debuginfo` Red Hat:enterprise_linux:5::server	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner` Red Hat:enterprise_linux:5::server	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8

Show 34 moreShow less

Affected packages
Package	Affected	Fixed
`xulrunner-debuginfo` Red Hat:enterprise_linux:5::server	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`xulrunner-devel` Red Hat:enterprise_linux:5::server	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`firefox` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox` Red Hat:enterprise_linux:6::computenode	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::computenode	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::computenode	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`firefox-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`xulrunner-devel` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`thunderbird` Red Hat:enterprise_linux:5::client	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`thunderbird-debuginfo` Red Hat:enterprise_linux:5::client	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`thunderbird` Red Hat:rhel_productivity:5	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`thunderbird-debuginfo` Red Hat:rhel_productivity:5	before 0:10.0.10-1.el5_8	0:10.0.10-1.el5_8
`thunderbird` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::client	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`thunderbird` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::server	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`thunderbird` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`thunderbird-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:10.0.10-1.el6_3	0:10.0.10-1.el6_3
`MozillaFirefox` openSUSE:Tumbleweed	before 50.1.0-1.1	50.1.0-1.1
`MozillaThunderbird` openSUSE:Tumbleweed	before 45.5.1-1.1	45.5.1-1.1