CVE-2012-0460
N/A
N/A
Summary
Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
- http://secunia.com/advisories/48402
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
- http://www.ubuntu.com/usn/USN-1400-5
- http://secunia.com/advisories/48359
- http://www.ubuntu.com/usn/USN-1400-4
- http://secunia.com/advisories/48629
- http://www.mozilla.org/security/announce/2012/mfsa2012-18.html
- http://www.ubuntu.com/usn/USN-1400-3
- http://rhn.redhat.com/errata/RHSA-2012-0387.html
- http://secunia.com/advisories/48496
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114
- http://secunia.com/advisories/49055
- http://www.ubuntu.com/usn/USN-1400-2
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032
- http://www.securitytracker.com/id?1026803
- http://secunia.com/advisories/48553
- http://www.ubuntu.com/usn/USN-1400-1
- http://secunia.com/advisories/48561
- http://rhn.redhat.com/errata/RHSA-2012-0388.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=727303
- http://www.securitytracker.com/id?1026801
- http://www.securitytracker.com/id?1026804
- http://secunia.com/advisories/48513
References
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
- http://secunia.com/advisories/48402
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
- http://www.ubuntu.com/usn/USN-1400-5
- http://secunia.com/advisories/48359
- http://www.ubuntu.com/usn/USN-1400-4
- http://secunia.com/advisories/48629
- http://www.mozilla.org/security/announce/2012/mfsa2012-18.html
- http://www.ubuntu.com/usn/USN-1400-3
- http://rhn.redhat.com/errata/RHSA-2012-0387.html
- http://secunia.com/advisories/48496
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114
- http://secunia.com/advisories/49055
- http://www.ubuntu.com/usn/USN-1400-2
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:032
- http://www.securitytracker.com/id?1026803
- http://secunia.com/advisories/48553
- http://www.ubuntu.com/usn/USN-1400-1
- http://secunia.com/advisories/48561
- http://rhn.redhat.com/errata/RHSA-2012-0388.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=727303
- http://www.securitytracker.com/id?1026801
- http://www.securitytracker.com/id?1026804
- http://secunia.com/advisories/48513
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.