CVE-2015-0799 in Mozilla Firefox
摘要 (英语)
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
预定
2015-01-07
披露
2015-04-08
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 74657 | Mozilla Firefox HTTP/2 Alt-Svc Header 权限提升 | 20 | 未经证实 | 官方修复 | CVE-2015-0799 |