Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-3976

Опубликовано: 28 авг. 2012
Источник: redhat
CVSS2: 4.3

Описание

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=851931Mozilla: Incorrect site SSL certificate data display (MFSA 2012-69)

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 13 лет назад

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.

nvd
почти 13 лет назад

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.

debian
почти 13 лет назад

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMo ...

github
больше 3 лет назад

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.

oracle-oval
почти 13 лет назад

ELSA-2012-1210: firefox security update (CRITICAL)

4.3 Medium

CVSS2