CVE-2012-4204

HIGH · CVSS 9.3 EPSS 5.78%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-11-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2012-4204

Severity

HIGH

CVSS

9.3

EPSS

5.78%

Firefox Java

Original NVD Description

The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.