CVE-2012-0446: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0446?
CVE-2012-0446 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary scripts.
How do I fix CVE-2012-0446?
To mitigate CVE-2012-0446, update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version where the vulnerabilities have been patched.
What types of applications are affected by CVE-2012-0446?
CVE-2012-0446 affects multiple versions of Mozilla Firefox, Thunderbird, and SeaMonkey, particularly versions 4.x through 9.0 and related beta versions.
What attacks can be performed using vulnerabilities in CVE-2012-0446?
An attacker can exploit CVE-2012-0446 to inject arbitrary web scripts or HTML, which may lead to phishing or other malicious activities.
Is it safe to use older versions of Mozilla products affected by CVE-2012-0446?
Using older versions of Mozilla products affected by CVE-2012-0446 poses a significant security risk and should be avoided.