PT-2005-1641 · Mozilla+1 · Mozilla Firefox+2

U115577

·

Publicado

2005-02-28

·

Atualizado

2017-10-11

·

CVE-2005-0593

CVSS v2.0

2.6

Baixa

VetorAV:N/AC:H/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 1.0.1 Mozilla versions prior to 1.7.6
Description The issue allows remote attackers to spoof the SSL secure site lock icon. This can occur in three scenarios: (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.
Recommendations For Firefox versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. For Mozilla versions prior to 1.7.6, update to version 1.7.6 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-0593
RHSA-2005:176
RHSA-2005_176
RHSA-2005_384

Produtos afetados

Firefox
Mozilla Firefox
Red Hat