Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2012-03-14 19:55
Updated : 2018-01-18 02:29
NVD link : CVE-2012-0460
Mitre link : CVE-2012-0460
CVE.ORG link : CVE-2012-0460
JSON object : View
Products Affected
mozilla
- firefox
- firefox_esr
- thunderbird
- seamonkey
- thunderbird_esr
CWE
CWE-264
Permissions, Privileges, and Access Controls