Test ID:	1.3.6.1.4.1.25623.1.2.1.2012.69
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2012-69) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Incorrect site SSL certificate data display Security researcher Mark Poticha reported an issue where incorrect SSL certificate information can be displayed on the addressbar, showing the SSL data for a previous site while another has been loaded. This is caused by two onLocationChange events being fired out of the expected order, leading to the displayed certificate data to not be updated. This can be used for phishing attacks by allowing the user to input form or other data on a newer, attacking, site while the credentials of an older site appear on the addressbar. Affected Software/OS: Firefox version(s) below 15. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3976 BugTraq ID: 55313 http://www.securityfocus.com/bid/55313 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16060 RedHat Security Advisories: RHSA-2012:1210 http://rhn.redhat.com/errata/RHSA-2012-1210.html SuSE Security Announcement: SUSE-SU-2012:1157 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html SuSE Security Announcement: SUSE-SU-2012:1167 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html SuSE Security Announcement: openSUSE-SU-2012:1065 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html http://www.ubuntu.com/usn/USN-1548-1 http://www.ubuntu.com/usn/USN-1548-2
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.