CVE-2015-0812 in Mozilla Firefoxinfo

Zusammenfassung (Englisch)

Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.

Reservieren

07.01.2015

Veröffentlichung

01.04.2015

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
74502	Mozilla Firefox Lightweight Theme Remote Code Execution	17	Unbewiesen	Offizieller Fix	CVE-2015-0812

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

◂ ZurückÜbersichtWeiter ▸

Want to know what is going to be exploited?

We predict KEV entries!