GCVE - cpe:2.3:a:mozilla:firefox_esr:10.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox_esr:10.1:*:*:*:*:*:*:*

part: a version: 10.1 update: *

Vendor	Mozilla (`be1b0d4e-21a7-5a25-9982-bbda6ef43ec1`)
Product	Firefox Esr (`bdc94ed7-a614-58b9-b7d5-0e4682d3ba68`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/firefox-esr`	purl2cpe	2026-06-01 10:17:53.471665
`pkg:github/plasmazilla/firefox-esr`	purl2cpe	2026-06-01 10:17:53.471667
`pkg:npm/firefox-binary`	purl2cpe	2026-06-01 10:17:53.471669
`pkg:rpm/opensuse/firefox-esr`	purl2cpe	2026-06-01 10:17:53.471670

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0462`	vulnerable	2026-06-03 14:31:37.167514	Details available Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.041Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://secunia.com/advisories/48624 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html http://www.ubuntu.com/usn/USN-1400-5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0460`	vulnerable	2026-06-03 14:31:37.160898	Details available Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.056Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html http://www.ubuntu.com/usn/USN-1400-5 http://secunia.com/advisories/48359	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0459`	vulnerable	2026-06-03 14:31:37.157458	Details available The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.010Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html http://www.ubuntu.com/usn/USN-1400-5 http://secunia.com/advisories/48359	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0455`	vulnerable	2026-06-03 14:31:37.130035	Details available Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:30.984Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://secunia.com/advisories/48624 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0454`	vulnerable	2026-06-03 14:31:37.126712	Details available Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving use of the file-open dialog in a child window, related to the IUnknown_QueryService function in the Windows shlwapi.dll library. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:31.073Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48402 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14258 http://secunia.com/advisories/48629 http://www.mozilla.org/security/announce/2012/mfsa2012-12.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0451`	vulnerable	2026-06-03 14:31:37.110314	Details available CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers. Published: 2012-03-14T19:00:00.000Z Updated: 2024-08-06T18:23:30.980Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://secunia.com/advisories/48402 https://bugzilla.mozilla.org/show_bug.cgi?id=717511 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html http://www.ubuntu.com/usn/USN-1400-5	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.