Lucene search
Ubuntu.comUB:CVE-2015-0812HistoryApr 01, 2015 - 12:00 a.m.
CVE-2015-0812
2015-04-0100:00:00
ubuntu.com
ubuntu.com
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.5%
Mozilla Firefox before 37.0 does not require an HTTPS session for
lightweight theme add-on installations, which allows man-in-the-middle
attackers to bypass an intended user-confirmation requirement by deploying
a crafted web site and conducting a DNS spoofing attack against a
mozilla.org subdomain.
Related
cvelist
cvelist
CVE-2015-0812
2015-04-01 10:00:00
mozilla
mozilla
prion
prion
Design/Logic Flaw
2015-04-01 10:59:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-32) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Windows
2015-04-06 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (Apr 2015) - Mac OS X
2015-04-06 00:00:00
cve
cve
CVE-2015-0812
2015-04-01 10:59:00
kaspersky
kaspersky
archlinux
archlinux
firefox: multiple issues
2015-04-01 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2550-1)
2015-04-02 00:00:00
Firefox < 37.0 Multiple Vulnerabilities
2015-04-01 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-04-01 00:00:00
suse
suse
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-03-31 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-04-08 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-12-30 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.5%
Related for UB:CVE-2015-0812