Test ID:	1.3.6.1.4.1.25623.1.0.900446
Category:	Web application abuses
Title:	Firefox Status Bar Spoofing Vulnerability - Windows
Summary:	Mozilla Firefox browser is prone to status bar spoofing vulnerability.
Description:	Summary: Mozilla Firefox browser is prone to status bar spoofing vulnerability. Vulnerability Insight: Firefox doesn't properly handle the crafted URL which is being displayed in the user's browser which lets the attacker perform clickjacking attack and can spoof the user redirect to a different arbitrary malformed website. Vulnerability Impact: Successful remote exploitation will let the attacker spoof the status bar information and can gain sensitive information by redirecting the authentic user to any malicious URL. Affected Software/OS: Mozilla Firefox version 3.0.5 and 2.0.0.18/19 on Windows. Solution: Upgrade to Mozilla Firefox version 3.6.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0253 https://www.exploit-db.com/exploits/7842 http://securityreason.com/securityalert/4936 XForce ISS Database: firefox-onclickaction-click-hijacking(48212) https://exchange.xforce.ibmcloud.com/vulnerabilities/48212
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.