CVE-2012-5354

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 16.0 Thunderbird versions prior to 16.0 SeaMonkey versions prior to 2.13

Description The issue arises from improper handling of navigation away from a web page with multiple active menus of SELECT elements, allowing remote attackers to conduct clickjacking attacks. This can be achieved through vectors involving an XPI file, the window.open method, and the Geolocation API.

Recommendations For Mozilla Firefox versions prior to 16.0, update to version 16.0 or later. For Thunderbird versions prior to 16.0, update to version 16.0 or later. For SeaMonkey versions prior to 2.13, update to version 2.13 or later.