Info

Disclosure

May 27, 2012

Discovery

Unknown

Dates

Exploit

May 27, 2012

Solution

Aug 28, 2012

Description

Mozilla Firefox contains a flaw that is triggered when objects with invalid, expired, or missing certificates are installed silently without a warning message. This may allow a remote attacker to more easily compromise a user's system.

Classification

Location: Context Dependent
Attack Type: Cryptographic, Other
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Public
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to version 15 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Mozilla Organization

Firefox

Unspecified

References

Vendor Specific News/Changelog Entry: http://www.mozilla.org/en-US/firefox/15.0/releasenotes/buglist.html
https://bugzilla.mozilla.org/show_bug.cgi?id=759010

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/86530