Mozilla Firefox/SeaMonkey/Thunderbird cross-origin Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Mozilla Firefox & lt; 10.0
Mozilla Thunderbird 9.0
Mozilla Thunderbird 8.0
Mozilla Thunderbird 7.0.1
Mozilla Thunderbird 7.0
Mozilla Thunderbird 6.0.2
Mozilla Thunderbird 6.0.1
Mozilla Thunderbird 6.0
Mozilla Thunderbird 5.0
Mozilla Thunderbird 6
Mozilla Thunderbird 6
Mozilla Thunderbird 5
Mozilla SeaMonkey 2.x
Unaffected system:
Mozilla Firefox 10.0.
Mozilla Thunderbird 10.0
Mozilla SeaMonkey 2.7
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51765
Cve id: CVE-2012-0445

Firefox is a very popular open-source WEB browser. Thunderbird is a mail client that supports IMAP, POP protocol, and HTML format. SeaMonkey is an open-source Web browser, mail and newsgroup client, IRC session client, and HTML editor.

Mozilla Firefox/Thunderbird/SeaMonkey has the cross-origin Security Restriction Bypass Vulnerability. Remote attackers can exploit this vulnerability to bypass HTML5 frame navigation policies and initiate spoofing and phishing attacks.

<* Source: Alex Dvorov
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Mozilla
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.mozilla.org/security/