Логотип exploitDog
bind:"CVE-2012-1964"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2012-1964"

Количество 7

Количество 7

ubuntu логотип

CVE-2012-1964

около 13 лет назад

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

CVSS2: 4
EPSS: Низкий
redhat логотип

CVE-2012-1964

около 13 лет назад

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2012-1964

около 13 лет назад

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

CVSS2: 4
EPSS: Низкий
debian логотип

CVE-2012-1964

около 13 лет назад

The certificate-warning functionality in browser/components/certerror/ ...

CVSS2: 4
EPSS: Низкий
github логотип

GHSA-895m-hw9q-p7wj

больше 3 лет назад

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1089

около 13 лет назад

ELSA-2012-1089: thunderbird security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2012-1088

около 13 лет назад

ELSA-2012-1088: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-1964

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

CVSS2: 4
1%
Низкий
около 13 лет назад
redhat логотип
CVE-2012-1964

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

CVSS2: 4.3
1%
Низкий
около 13 лет назад
nvd логотип
CVE-2012-1964

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

CVSS2: 4
1%
Низкий
около 13 лет назад
debian логотип
CVE-2012-1964

The certificate-warning functionality in browser/components/certerror/ ...

CVSS2: 4
1%
Низкий
около 13 лет назад
github логотип
GHSA-895m-hw9q-p7wj

The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.

1%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2012-1089

ELSA-2012-1089: thunderbird security update (CRITICAL)

около 13 лет назад
oracle-oval логотип
ELSA-2012-1088

ELSA-2012-1088: firefox security update (CRITICAL)

около 13 лет назад

Уязвимостей на страницу