CVE-2012-1964: Medium severity firefox vulnerability
The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1964?
CVE-2012-1964 is classified as a moderate severity vulnerability that affects multiple versions of Mozilla Firefox and other Mozilla products.
How do I fix CVE-2012-1964?
To fix CVE-2012-1964, users should update their Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version as recommended by Mozilla.
What does CVE-2012-1964 exploit?
CVE-2012-1964 exploits a flaw in the certificate-warning handling functionality in various Mozilla applications, allowing potential misuse of SSL/TLS certificates.
Which versions are affected by CVE-2012-1964?
CVE-2012-1964 affects Mozilla Firefox versions 4.x to 12.0, Thunderbird versions 5.0 to 12.0, and impacted versions of SeaMonkey before 2.10.
Is CVE-2012-1964 still relevant today?
While CVE-2012-1964 is an older vulnerability, it highlights the importance of keeping software updated to protect against similar security issues.