PT-2015-1050 · Mozilla+3 · Firefox+3

Muneaki Nishimura · Publicado 2015-04-03 · Atualizado 2024-12-12 · CVE-2015-0799

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0.1

Description The issue allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server. This is achieved by specifying the server in the uri-host field of an Alt-Svc HTTP/2 response header, thus enabling the attacker to control network traffic and modify the server address.

Recommendations For versions prior to 37.0.1, update to version 37.0.1 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2015-1374

ALT-PU-2015-1464

BDU:2015-09904

CVE-2015-0799

MGASA-2015-0342

OPENSUSE-SU-2015_0677-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

USN-2557-1

Produtos afetados

Alt Linux

Firefox

Suse

Ubuntu

Referências · 2244

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• https://suse.com/security/cve/CVE-2009-0354 · Nota
• https://bdu.fstec.ru/vul/2015-09904 · Nota de Segurança
• https://suse.com/security/cve/CVE-2024-3302 · Nota
• https://suse.com/security/cve/CVE-2024-1551 · Nota
• https://suse.com/security/cve/CVE-2012-1937 · Nota
• https://suse.com/security/cve/CVE-2023-25731 · Nota
• https://suse.com/security/cve/CVE-2009-1307 · Nota
• https://suse.com/security/cve/CVE-2020-6812 · Nota
• https://suse.com/security/cve/CVE-2024-4769 · Nota
• https://suse.com/security/cve/CVE-2016-5282 · Nota
• https://suse.com/security/cve/CVE-2010-1210 · Nota
• https://suse.com/security/cve/CVE-2009-3381 · Nota
• https://suse.com/security/cve/CVE-2016-2798 · Nota