CVE-2012-0451: Code Injection
CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0451?
CVE-2012-0451 has a medium severity rating due to the potential for Content Security Policy bypass leading to further exploitation.
How do I fix CVE-2012-0451?
To fix CVE-2012-0451, update affected applications like Mozilla Firefox, Thunderbird, or SeaMonkey to their latest versions.
Which versions of software are affected by CVE-2012-0451?
CVE-2012-0451 affects Mozilla Firefox versions 4.x through 10.0, Thunderbird 5.0 through 10.0, and SeaMonkey before version 2.8.
What types of attacks could exploit CVE-2012-0451?
Exploiting CVE-2012-0451 could lead to attacks that bypass security measures implemented by Content Security Policy.
Is CVE-2012-0451 still a concern for current users?
While CVE-2012-0451 is no longer relevant to current software versions, users should ensure they are using up-to-date applications to avoid past vulnerabilities.