NVD

Id
43819  
Name
CVE-2012-1961  
Description
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-18  
Modified Date
2014-10-10  
Seq
2012-1961  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220150 43819 CVE-2012-1961 SUSE-SU-2012:0895  View
220151 43819 CVE-2012-1961 SUSE-SU-2012:0896  View
220152 43819 CVE-2012-1961 openSUSE-SU-2012:0899  View
220153 43819 CVE-2012-1961 openSUSE-SU-2012:0917  View
220154 43819 CVE-2012-1961 oval:org.mitre.oval:def:16993  View
220155 43819 CVE-2012-1961 RHSA-2012:1088  View
220156 43819 CVE-2012-1961 http://www.mozilla.org/security/announce/2012/mfsa2012-51.html  View
220157 43819 CVE-2012-1961 1027256  View
220158 43819 CVE-2012-1961 USN-1509-1  View
220159 43819 CVE-2012-1961 USN-1509-2  View
220160 43819 CVE-2012-1961 https://bugzilla.mozilla.org/show_bug.cgi?id=761655  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27425 JVNDB-2012-003132 複数の Mozilla 製品におけるクリックジャッキング攻撃の脆弱性 複数の Mozilla 製品は、X-Frame-Options ヘッダの重複した値を適切に処理しないため、クリックジャッキング攻撃を実行される脆弱性が存在します。 CVE-2012-1961 55199 CVE-2012-1961 43819 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003132.html 2012-07-17 2012-12-14 View