Description
Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/50904 ↗
- http://secunia.com/advisories/50984 ↗
- http://secunia.com/advisories/50935 ↗
- http://secunia.com/advisories/50856 ↗
- http://secunia.com/advisories/50892 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16184 ↗
- http://www.mozilla.org/security/announce/2012/mfsa2012-75.html ↗
- https://bugzilla.mozilla.org/show_bug.cgi?id=575294 ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html ↗
- http://www.ubuntu.com/usn/USN-1611-1 ↗