{"id":"CVE-2012-0479","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-0479","generatedAt":"2026-10-27T17:44:01.633Z","title":"Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom…","description":"Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.","published":"2012-04-25T10:10:18.000Z","lastModified":"2026-06-16T23:37:23.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":[],"affected":["mozilla/firefox","mozilla/thunderbird","mozilla/thunderbird esr","mozilla/seamonkey"],"epss":{"score":0.02213,"percentile":0.82497,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.21%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://secunia.com/advisories/48920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/49047","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/49055","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2012/dsa-2457","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2012/dsa-2458","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2012/dsa-2464","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:066","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:081","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-33.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/53224","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=714631","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75156","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-33.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/53224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=714631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17011","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-0479","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}