Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
21 Oct 2024, 13:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:* |
Information
Published : 2012-03-14 19:55
Updated : 2024-10-21 13:55
NVD link : CVE-2012-0460
Mitre link : CVE-2012-0460
CVE.ORG link : CVE-2012-0460
JSON object : View
Products Affected
mozilla
- seamonkey
- firefox_esr
- thunderbird
- thunderbird_esr
- firefox
CWE
CWE-264
Permissions, Privileges, and Access Controls