CVE-2012-4930

CVE-2012-4930 describes a "CRIME" attack affecting SPDY protocol 3 and earlier, found in products like Mozilla Firefox and Google Chrome. This vulnerability allows man-in-the-middle attackers to decrypt encrypted HTTP headers by observing length differences in compressed data. The CVSS score of 2.6 indicates a low severity, with a network attack vector and high attack complexity, potentially leading to partial confidentiality compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat.