Mozilla Firefox Multiple Vulnerabilities
Last Update Date:
9 Apr 2015
Release Date:
8 Apr 2015
3600
Views
RISK: Medium Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Mozilla Firefox, which could be exploited by a remote user to obtain potentially sensitive information on the target system, and bypass certificate verification.
- A remote user can create specially crafted HTML that, when loaded by the target user, will invoke 'Reader mode' and bypass security restrictions to access potentially sensitive information from privileged URLs.
- A remote user with the ability to conduct a man-in-the-middle attack can trigger a flaw in the Firefox HTTP Alternative Services implementation by specifying an Alt-Svc header to bypass SSL certificate verification and impersonate the target site.
Impact
- Security Restriction Bypass
- Information Disclosure
- Data Manipulation
System / Technologies affected
- Versions prior to 37.0.1
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- The vendor has issued a fix (37.0.1).
Vulnerability Identifier
Source
Related Link
Share with