Read the docs
TI-2012-03394 Aliases CVE-2012-3973GHSA-rrwm-vm8h-54hm

The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote…

Priority MEDIUM 41CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.

Why it matters now

EPSS 0.04931 92nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 147

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*up to 14.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*1.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*1.0 preview_releaseVulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableMozilla
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* Versions up to 14.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:* Versions 1.0 preview_release Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Mozilla
Show 137 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*1.0.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*1.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*1.5 beta1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*1.5 beta2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*1.5.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*1.5.0.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*1.5.0.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*1.5.0.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*1.5.0.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*1.5.0.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*1.5.0.7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*1.5.0.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*1.5.0.9VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*1.5.0.10VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*1.5.0.11VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*1.5.0.12VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*1.5.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*1.5.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*1.5.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*1.5.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*1.5.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*1.5.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*1.5.7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*1.5.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*1.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*2.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*2.0.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*2.0.0.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*2.0.0.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*2.0.0.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*2.0.0.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*2.0.0.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*2.0.0.7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*2.0.0.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*2.0.0.9VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*2.0.0.10VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*2.0.0.11VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*2.0.0.12VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*2.0.0.13VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*2.0.0.14VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*2.0.0.15VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*2.0.0.16VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*2.0.0.17VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*2.0.0.18VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*2.0.0.19VulnerableMozilla
cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*2.0.0.20VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*3.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*3.0.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*3.0.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*3.0.7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*3.0.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*3.0.9VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*3.0.10VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*3.0.11VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*3.0.12VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*3.0.13VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*3.0.14VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*3.0.15VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*3.0.16VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*3.0.17VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*3.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*3.5.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*3.5.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*3.5.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*3.5.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*3.5.5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*3.5.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*3.5.7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:*3.5.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*3.5.9VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:*3.5.10VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.11:*:*:*:*:*:*:*3.5.11VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.12:*:*:*:*:*:*:*3.5.12VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.13:*:*:*:*:*:*:*3.5.13VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.14:*:*:*:*:*:*:*3.5.14VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.5.15:*:*:*:*:*:*:*3.5.15VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*3.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*3.6.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*3.6.3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*3.6.4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*3.6.6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*3.6.7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*3.6.8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*3.6.9VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*3.6.10VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*3.6.11VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.12:*:*:*:*:*:*:*3.6.12VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.13:*:*:*:*:*:*:*3.6.13VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.14:*:*:*:*:*:*:*3.6.14VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.15:*:*:*:*:*:*:*3.6.15VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.16:*:*:*:*:*:*:*3.6.16VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.17:*:*:*:*:*:*:*3.6.17VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.18:*:*:*:*:*:*:*3.6.18VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.19:*:*:*:*:*:*:*3.6.19VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.20:*:*:*:*:*:*:*3.6.20VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.21:*:*:*:*:*:*:*3.6.21VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.22:*:*:*:*:*:*:*3.6.22VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.23:*:*:*:*:*:*:*3.6.23VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.24:*:*:*:*:*:*:*3.6.24VulnerableMozilla
cpe:2.3:a:mozilla:firefox:3.6.25:*:*:*:*:*:*:*3.6.25VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*4.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*4.0 beta1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*4.0 beta10VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*4.0 beta11VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*4.0 beta12VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*4.0 beta2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*4.0 beta3VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*4.0 beta4VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*4.0 beta5VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*4.0 beta6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*4.0 beta7VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*4.0 beta8VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*4.0 beta9VulnerableMozilla
cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*5.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*6.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*6.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*6.0.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*7.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*7.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:*8.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*8.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:*9.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*9.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*10.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*10.0.1VulnerableMozilla
cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*10.0.2VulnerableMozilla
cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:*11.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:12.0:*:*:*:*:*:*:*12.0VulnerableMozilla
cpe:2.3:a:mozilla:firefox:12.0:beta6:*:*:*:*:*:*12.0 beta6VulnerableMozilla
cpe:2.3:a:mozilla:firefox:13.0:*:*:*:*:*:*:*13.0VulnerableMozilla
  • cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:* Versions 1.5 beta1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:* Versions 1.5 beta2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:* Versions 1.5.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:* Versions 1.5.0.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:* Versions 1.5.0.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:* Versions 1.5.0.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:* Versions 1.5.0.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:* Versions 1.5.0.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:* Versions 1.5.0.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:* Versions 1.5.0.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:* Versions 1.5.0.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:* Versions 1.5.0.10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:* Versions 1.5.0.11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:* Versions 1.5.0.12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:* Versions 2.0.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:* Versions 2.0.0.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:* Versions 2.0.0.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:* Versions 2.0.0.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:* Versions 2.0.0.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:* Versions 2.0.0.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:* Versions 2.0.0.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:* Versions 2.0.0.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:* Versions 2.0.0.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:* Versions 2.0.0.10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:* Versions 2.0.0.11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:* Versions 2.0.0.12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:* Versions 2.0.0.13 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:* Versions 2.0.0.14 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:* Versions 2.0.0.15 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:* Versions 2.0.0.16 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:* Versions 2.0.0.17 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:* Versions 2.0.0.18 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:* Versions 2.0.0.19 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:* Versions 2.0.0.20 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:* Versions 3.0.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:* Versions 3.0.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:* Versions 3.0.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:* Versions 3.0.10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:* Versions 3.0.11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:* Versions 3.0.15 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:* Versions 3.0.16 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:* Versions 3.0.17 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:* Versions 3.5.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:* Versions 3.5.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:* Versions 3.5.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:* Versions 3.5.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:* Versions 3.5.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:* Versions 3.5.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:* Versions 3.5.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:* Versions 3.5.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:* Versions 3.5.10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.11:*:*:*:*:*:*:* Versions 3.5.11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.12:*:*:*:*:*:*:* Versions 3.5.12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.13:*:*:*:*:*:*:* Versions 3.5.13 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.14:*:*:*:*:*:*:* Versions 3.5.14 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.5.15:*:*:*:*:*:*:* Versions 3.5.15 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:* Versions 3.6.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:* Versions 3.6.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:* Versions 3.6.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:* Versions 3.6.6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:* Versions 3.6.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:* Versions 3.6.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:* Versions 3.6.9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:* Versions 3.6.10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:* Versions 3.6.11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.12:*:*:*:*:*:*:* Versions 3.6.12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.13:*:*:*:*:*:*:* Versions 3.6.13 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.14:*:*:*:*:*:*:* Versions 3.6.14 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.15:*:*:*:*:*:*:* Versions 3.6.15 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.16:*:*:*:*:*:*:* Versions 3.6.16 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.17:*:*:*:*:*:*:* Versions 3.6.17 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.18:*:*:*:*:*:*:* Versions 3.6.18 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.19:*:*:*:*:*:*:* Versions 3.6.19 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.20:*:*:*:*:*:*:* Versions 3.6.20 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.21:*:*:*:*:*:*:* Versions 3.6.21 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.22:*:*:*:*:*:*:* Versions 3.6.22 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.23:*:*:*:*:*:*:* Versions 3.6.23 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.24:*:*:*:*:*:*:* Versions 3.6.24 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:3.6.25:*:*:*:*:*:*:* Versions 3.6.25 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* Versions 4.0 beta1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* Versions 4.0 beta10 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* Versions 4.0 beta11 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* Versions 4.0 beta12 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* Versions 4.0 beta2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* Versions 4.0 beta3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* Versions 4.0 beta4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* Versions 4.0 beta5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* Versions 4.0 beta6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:* Versions 4.0 beta7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:* Versions 4.0 beta8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:* Versions 4.0 beta9 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:* Versions 8.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:* Versions 10.0.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:* Versions 10.0.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:12.0:beta6:*:*:*:*:*:* Versions 12.0 beta6 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:firefox:13.0:*:*:*:*:*:*:* Versions 13.0 Vulnerable ·Mozilla

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

Not affected: 2 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-3973
  2. 2026-10-03 Alias added: GHSA-rrwm-vm8h-54hm

References

  • TI-2024-08981 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-09832 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.6
  • TI-2019-08769 Improper input validation in Mozilla Firefox ESR KEVCVSS 3.1CRITICAL 10.0
  • TI-2010-03577 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-04799 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
  • TI-2023-04477 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
See all 3444 →

Sources