PT-2004-1841 · Mozilla · Firefox

Publicado 2004-08-03 · Atualizado 2017-10-11 · CVE-2004-0763

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 0.9.1 through 0.9.2

Description The issue allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the onunload method.

Recommendations For Mozilla Firefox versions 0.9.1 through 0.9.2, consider disabling Javascript as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-0763

Produtos afetados

Firefox

Referências · 18

• 🔥 https://exploit-db.com/exploits/24312 · Exploit
• 🔥 https://exploit-db.com/exploits/24069 · Exploit
• http://marc.info/?l=bugtraq&m=109900315219363&w=2 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16796 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3989 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9436 · Nota
• http://marc.info/?l=bugtraq&m=109087067730938&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0763 · Nota de Segurança
• http://cipher.org.uk/index.php?p=advisories/Certificate_Spoofing_Mozilla_FireFox_25-07-2004.advisory · Nota
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt · Aviso do Fabricante
• http://secunia.com/advisories/12160 · Aviso do Fabricante
• http://securityfocus.com/bid/15495 · Nota
• http://bugzilla.mozilla.org/show_bug.cgi?id=253121 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200408-22.xml · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024372.html · Nota