CVE-2013-0747

The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2…

published January 13, 2013

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly enforce the Same Origin Policy, which allows remote attackers to conduct clickjacking attacks via crafted JavaScript code that listens for a mutation event.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02189 · 82.3th percentile
Published
2013-01-13T20:00Z
EPSS history
Timeline
  • 13 JAN 20:00Z
    The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2…
    cvelistv5