CVE-2012-0445

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and…

published February 1, 2012

CVSS
—
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02098 · 81.4th percentile
Published
2012-02-01T16:00Z
EPSS history
Timeline
  • 01 FEB 16:00Z
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and…
    cvelistv5