CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
87.2%
Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
Vendor | Product | Version | CPE |
---|---|---|---|
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* |
lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html
lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
rhn.redhat.com/errata/RHSA-2012-0387.html
rhn.redhat.com/errata/RHSA-2012-0388.html
secunia.com/advisories/48359
secunia.com/advisories/48402
secunia.com/advisories/48496
secunia.com/advisories/48513
secunia.com/advisories/48553
secunia.com/advisories/48561
secunia.com/advisories/48629
secunia.com/advisories/49055
www.mandriva.com/security/advisories?name=MDVSA-2012:032
www.mozilla.org/security/announce/2012/mfsa2012-18.html
www.securitytracker.com/id?1026801
www.securitytracker.com/id?1026803
www.securitytracker.com/id?1026804
www.ubuntu.com/usn/USN-1400-1
www.ubuntu.com/usn/USN-1400-2
www.ubuntu.com/usn/USN-1400-3
www.ubuntu.com/usn/USN-1400-4
www.ubuntu.com/usn/USN-1400-5
bugzilla.mozilla.org/show_bug.cgi?id=727303
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15114