PT-2012-5949
CVE-2012-5354
·
تاريخ النشر
2012-10-10
·
تاريخ التحديث
2020-08-26
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 16.0
Thunderbird versions prior to 16.0
SeaMonkey versions prior to 2.13
Description
The issue arises from improper handling of navigation away from a web page with multiple active menus of SELECT elements, allowing remote attackers to conduct clickjacking attacks. This can be achieved through vectors involving an XPI file, the
window.open method, and the Geolocation API.Recommendations
For Mozilla Firefox versions prior to 16.0, update to version 16.0 or later.
For Thunderbird versions prior to 16.0, update to version 16.0 or later.
For SeaMonkey versions prior to 2.13, update to version 2.13 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾