CVE-2012-1956

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 15.0 Thunderbird versions prior to 15.0 SeaMonkey versions prior to 2.12

Description The issue makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin, by not preventing the use of the Object.defineProperty method to shadow the window.location object.

Recommendations For Mozilla Firefox versions prior to 15.0, update to version 15.0 or later. For Thunderbird versions prior to 15.0, update to version 15.0 or later. For SeaMonkey versions prior to 2.12, update to version 2.12 or later.