CVE-2012-5837

Mozilla: Script entered into Developer Toolbar runs with chrome privileges (MFSA 2012-102)

Published Nov 21, 2012 CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Description
The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-5715 The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
Ubuntu USN Ubuntu USN USN-1638-1 Firefox vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 9:21 PM
Reserved
Nov 5, 2012, 12:00 AM
Status
Modified
Published
Nov 21, 2012, 12:55 PM
Modified
Jun 16, 2026, 11:47 PM
Severity
Moderate
Public date
Nov 20, 2012, 12:00 AM