CVE-2012-1967

HIGH · CVSS 10 EPSS 4.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-1967

Severity

HIGH

CVSS

EPSS

4.00%

Firefox Java

Original Filing — NVD Description

Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.