CVE-2012-3973

Mozilla: HTTPMonitor extension allows for remote debugging without explicit activation (MFSA 2012-66)

Published Aug 29, 2012 CVSS 2.0 · 7.6 High EPSS 4.9% KEV · Not listed
Description
The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-3917 The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
Ubuntu USN Ubuntu USN USN-1548-1 Firefox vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:21 PM
Reserved
Jul 11, 2012, 12:00 AM
Status
Modified
Published
Aug 29, 2012, 10:56 AM
Modified
Jun 16, 2026, 11:44 PM
Severity
Critical
Public date
Aug 28, 2012, 12:00 AM