PT-2012-2572
CVE-2012-0451
·
تاريخ النشر
2012-03-13
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 4.x through 10.0
Firefox ESR versions 10.x before 10.0.3
Thunderbird versions 5.0 through 10.0
Thunderbird ESR versions 10.x before 10.0.3
SeaMonkey version 2.8 and earlier
Description
A CRLF injection issue allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
Recommendations
For Mozilla Firefox versions 4.x through 10.0, update to version 10.0.3 or later.
For Firefox ESR versions 10.x before 10.0.3, update to version 10.0.3 or later.
For Thunderbird versions 5.0 through 10.0, update to version 10.0.3 or later.
For Thunderbird ESR versions 10.x before 10.0.3, update to version 10.0.3 or later.
For SeaMonkey version 2.8 and earlier, update to version 2.8 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾