VulnerableCode Vulnerability Details

Staging Environment: Content and features may be unstable or change without notice.

Search for vulnerabilities

Vulnerability details: VCID-k8gc-ufm1-9ffn

Vulnerability ID	VCID-k8gc-ufm1-9ffn
Aliases	CVE-2012-4195
Summary	Mozilla has fixed a number of issues related to the Location object in order to enhance overall security. Details for each of the current fixed issues are below. Thunderbird is only affected by window.location issues through RSS feeds and extensions that load web content.Security researcher Mariusz Mlynski reported that the true value of window.location could be shadowed by user content through the use of the valueOf method, which can be combined with some plugins to perform a cross-site scripting (XSS) attack on users.
Status	Published
Exploitability	None
Weighted Severity	None
Risk	None
Affected and Fixed Packages	Package Details

Weaknesses (0)

There are no known CWE.

System	Score	Found at
epss	0.00962	https://api.first.org/data/v1/epss?cve=CVE-2012-4195
generic_textual	critical	https://www.mozilla.org/en-US/security/advisories/mfsa2012-90

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4195.json
		https://api.first.org/data/v1/epss?cve=CVE-2012-4195
869893		https://bugzilla.redhat.com/show_bug.cgi?id=869893
CVE-2012-4195		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4195
GLSA-201301-01		https://security.gentoo.org/glsa/201301-01
mfsa2012-90		https://www.mozilla.org/en-US/security/advisories/mfsa2012-90
RHSA-2012:1407		https://access.redhat.com/errata/RHSA-2012:1407
RHSA-2012:1413		https://access.redhat.com/errata/RHSA-2012:1413
USN-1620-1		https://usn.ubuntu.com/1620-1/
USN-1620-2		https://usn.ubuntu.com/1620-2/

No exploits are available.

Exploit Prediction Scoring System (EPSS)

Date	Actor	Action	Source	VulnerableCode Version
2026-05-29T08:27:22.394345+00:00	Mozilla Importer	Import	https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-90.md	38.6.0