Lucene search

K
mozillaMozilla FoundationMFSA2006-12
HistoryApr 13, 2006 - 12:00 a.m.

Secure-site spoof (requires security warning dialog) — Mozilla

2006-04-1300:00:00
Mozilla Foundation
www.mozilla.org
7

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.123 Low

EPSS

Percentile

95.3%

Tristor reports that it was possible to spoof the browser’s secure-site indicators (the lock icon, the site name in the URL field, the gold URL field background in Firefox) by first loading the target secure site in a pop-up window, then changing its location to a different site.

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.123 Low

EPSS

Percentile

95.3%