CVE-2012-0446

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 9.0 Thunderbird versions 5.0 through 9.0 SeaMonkey versions prior to 2.7

Description The issue allows remote attackers to inject arbitrary web script or HTML via a web page or Firefox extension, due to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.

Recommendations For Mozilla Firefox versions 4.x through 9.0, update to a version later than 9.0 to resolve the issue. For Thunderbird versions 5.0 through 9.0, update to a version later than 9.0 to resolve the issue. For SeaMonkey versions prior to 2.7, update to version 2.7 or later to resolve the issue.