NetSight
IP …
medium4.3

CVE-2012-3976

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between…

Impact

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.

Affected products

VendorProductAffected versions
MozillaFirefox
before 15.0
from 10.0 before 10.0.7
MozillaSeamonkey
before 2.12
OpensuseOpensuse
Version 12.2
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Server
Versions 10, 11
SuseLinux Enterprise Software Development Kit
Version 11
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.3
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Eus
Version 6.3
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04

Weakness classification

CWE-200

References