Test ID:	1.3.6.1.4.1.25623.1.2.1.2015.129
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2015-129) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Certain escaped characters in host of Location-header are being treated as non-escaped Security researcher Frans Rosen reported that URLs with certain escaped characters in hostnames are parsed incorrectly. This leads to parsing being abandoned when an effected escaped character is encountered followed by a navigation to the previously parsed version of the URL. When combined with a site allowing for navigation redirection that allows for escaped characters, this could lead to potential extraction of site specific tokens. Affected Software/OS: Firefox version(s) below 42. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7195 https://security.gentoo.org/glsa/201512-10 http://www.securitytracker.com/id/1034069 SuSE Security Announcement: openSUSE-SU-2015:1942 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html http://www.ubuntu.com/usn/USN-2785-1
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.