CVE-2012-4929

CVE-2012-4929, known as the "CRIME" attack, affects TLS 1.2 and earlier versions in products like Mozilla Firefox, Google Chrome, and Qt. This vulnerability allows man-in-the-middle attackers to decrypt sensitive HTTP header information by exploiting compression in TLS. The attack has a low severity CVSS score of 2.6, requiring high attack complexity (AC:H) to achieve partial confidentiality (C:P) of data. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage.