CVE-2012-1961: Input Validation
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1961?
CVE-2012-1961 has been classified as a moderate severity vulnerability due to its potential to facilitate clickjacking attacks.
How do I fix CVE-2012-1961?
To resolve CVE-2012-1961, users should upgrade to the latest version of affected applications such as Mozilla Firefox, Thunderbird, or SeaMonkey.
What types of attacks are possible with CVE-2012-1961?
CVE-2012-1961 can be exploited to conduct clickjacking attacks, allowing attackers to manipulate user interactions without their consent.
Which software versions are affected by CVE-2012-1961?
CVE-2012-1961 affects Mozilla Firefox versions 4.0 through 13.0, Thunderbird versions 5.0 through 13.0, and SeaMonkey versions before 2.11.
Is CVE-2012-1961 still a risk today?
While CVE-2012-1961 was identified in 2012, it can still pose a risk if users are on outdated versions of the software.