CVE-2012-5841: XSS
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5841?
CVE-2012-5841 has a medium severity level due to its potential for remote exploitation.
How do I fix CVE-2012-5841?
To fix CVE-2012-5841, update to the latest version of Firefox, Thunderbird, or SeaMonkey that is above the specified vulnerable versions.
What software is affected by CVE-2012-5841?
CVE-2012-5841 affects Mozilla Firefox, Firefox ESR, Thunderbird, Thunderbird ESR, and SeaMonkey versions prior to the limits defined in the vulnerability.
What type of vulnerability is CVE-2012-5841?
CVE-2012-5841 is a cross-origin security vulnerability that may allow remote attackers to conduct unauthorized write actions.
Is it safe to use older versions of the affected software with CVE-2012-5841?
Using older versions of the affected software while CVE-2012-5841 is unpatched poses a security risk.