CVE-2012-0445 in Firefox
요약 (영어)
Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame s name attribute.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2012. 01. 09.
공개
2012. 02. 01.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 4594 | Mozilla Firefox Sub-Frame Cross-Domain Name Attribute 권한 상승 | 264 | 입증되지 않음 | 공식 수정 | CVE-2012-0445 |