Lucene search
Mozilla FoundationMFSA2012-73HistorySep 21, 2012 - 12:00 a.m.
SPDY information disclosure — Mozilla
2012-09-2100:00:00
Mozilla Foundation
www.mozilla.org
41
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
65.1%
Security researchers Thai Duong and Juliano Rizzo reported that SPDY’s request header compression leads to information leakage, which can allow the extraction of private data such as session cookies, even over an encrypted SSL connection.
Affected configurations
Node
mozillafirefoxRange<15
ORmozillaseamonkeyRange<2.12
Related
debiancve
debiancve
CVE-2012-4930
2012-09-15 18:55:00
nvd
nvd
CVE-2012-4930
2012-09-15 18:55:03
CVE-2012-3977
2012-10-09 11:13:09
prion
prion
Design/Logic Flaw
2012-09-15 18:55:00
cvelist
cvelist
CVE-2012-4930
2012-09-15 18:00:00
avleonov
avleonov
Kenna Security: Analyzing Vulnerability Scan data
2018-01-20 22:27:03
nessus
nessus
F5 Networks BIG-IP : CRIME vulnerability via the SPDY protocol (K14059)
2016-01-28 00:00:00
Transport Layer Security (TLS) Protocol CRIME Vulnerability
2012-10-16 00:00:00
SeaMonkey < 2.12.0 Multiple Vulnerabilities
2012-08-29 00:00:00
cve
cve
CVE-2012-4930
2012-09-15 18:55:03
CVE-2012-3977
2012-10-09 11:13:09
osv
osv
CGA-xhxr-mwcm-hp3v
2024-06-06 12:30:00
f5
f5
K14059 : CRIME vulnerability via the SPDY protocol CVE-2012-4930
2015-04-29 00:00:00
CRIME vulnerability via the SPDY protocol CVE-2012-4930
2012-12-19 23:42:00
SOL14059 - CRIME vulnerability via the SPDY protocol CVE-2012-4930
2012-12-19 00:00:00
seebug
seebug
SPDY protocol <=3 协议信息泄露漏洞
2012-09-18 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2012-73) - Linux
2021-11-11 00:00:00
SSL/TLS: TLS/SPDY Protocol Information Disclosure Vulnerability (CRIME)
2017-03-09 00:00:00
ubuntucve
ubuntucve
CVE-2012-4930
2012-09-15 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2012-4929, CVE-2012-4930 aka CRIME attack
2012-10-20 22:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-10-29 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
65.1%
Related for MFSA2012-73