CVE catalog

CVE-2012-0479

iceweasel - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.21% · Oct 25, 2026

Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel6.03.5.16-10vulnerable
Debianiceweasel6.03.5.16-10~bpo50+1vulnerable
Debianiceweasel6.03.5.16-11vulnerable
Debianiceweasel6.03.5.16-11~bpo50+1vulnerable
Debianiceweasel6.03.5.16-12vulnerable
Debianiceweasel6.03.5.16-13vulnerable
Debianiceweasel6.03.5.16-4vulnerable
Debianiceweasel6.03.5.16-5vulnerable
Debianiceweasel6.03.5.16-5~bpo50+1vulnerable
Debianiceweasel6.03.5.16-6vulnerable
Debianiceweasel6.03.5.16-6~bpo50+1vulnerable
Debianiceweasel6.03.5.16-7vulnerable
Debianiceweasel6.03.5.16-7~bpo50+1vulnerable
Debianiceweasel6.03.5.16-8vulnerable
Debianiceweasel6.03.5.16-8~bpo50+1vulnerable
Debianiceweasel6.03.5.16-9vulnerable
Debianiceweasel6.03.5.16-14fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb6.03.5.16-14Not reportedDSA-2457-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]