PT-2015-1039 · Mozilla+3 · Firefox+3

Armin Ebert + 1 · Published 2015-03-31 · Updated 2024-12-12 · CVE-2015-0812

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0

Description The issue allows an attacker controlling network traffic to bypass user authentication by deploying a specially crafted website and conducting a DNS spoofing attack against a mozilla.org subdomain. This is possible because the browser does not require an HTTPS session for lightweight theme add-on installations.

Recommendations For versions prior to 37.0, update to version 37.0 or later to resolve the issue. As a temporary workaround, consider restricting the installation of lightweight theme add-ons to only those that use HTTPS connections, and avoid using unsecured networks to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-17

CWE-20

Related Identifiers

ALT-PU-2015-1374

BDU:2015-09887

CVE-2015-0812

MGASA-2015-0342

OPENSUSE-SU-2015_0677-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

USN-2550-1

Affected Products

Alt Linux

Firefox

Suse

Ubuntu

References · 2180

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_proxy_prototype.rb · Exploit
• https://bdu.fstec.ru/vul/2015-09904 · Security Note
• https://bdu.fstec.ru/vul/2015-09888 · Security Note
• http://ubuntu.com/usn/USN-2550-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09892 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2015-51 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2015-40 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09901 · Security Note
• http://mozilla.org/security/announce/2015/mfsa2015-32.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09886 · Security Note
• https://bdu.fstec.ru/vul/2015-09895 · Security Note
• https://bdu.fstec.ru/vul/2015-09890 · Security Note
• https://ubuntu.com/security/CVE-2015-0801 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2015-49 · Vendor Advisory