CVE-2013-0776
19.02.2013, 23:55
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 17.0.3 |
| mozilla | firefox | 𝑥 < 19.0 |
| mozilla | seamonkey | 𝑥 < 2.16 |
| mozilla | thunderbird | 𝑥 < 17.0.3 |
| mozilla | thunderbird_esr | 𝑥 < 17.0.3 |
| opensuse | opensuse | 11.4 |
| opensuse | opensuse | 12.1 |
| opensuse | opensuse | 12.2 |
| redhat | enterprise_linux_aus | 5.9 |
| redhat | enterprise_linux_desktop | 5.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_eus | 5.9 |
| redhat | enterprise_linux_eus | 6.3 |
| redhat | enterprise_linux_server | 5.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_workstation | 5.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| debian | debian_linux | 7.0 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 11.10 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 12.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||
| seamonkey |
| ||||||||||||||
| thunderbird |
| ||||||||||||||
| xulrunner-1.9.2 |
| ||||||||||||||
| xulrunner-2.0 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MozillaFirefox |
| ||||||||||||||||
| MozillaFirefox-devel |
| ||||||||||||||||
| MozillaFirefox-translations-common |
| ||||||||||||||||
| MozillaFirefox-translations-other |
| ||||||||||||||||
| MozillaThunderbird |
| ||||||||||||||||
| MozillaThunderbird-devel |
| ||||||||||||||||
| MozillaThunderbird-translations-common |
| ||||||||||||||||
| MozillaThunderbird-translations-other |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| firefox |
| ||
| libproxy |
| ||
| libproxy-bin |
| ||
| libproxy-devel |
| ||
| libproxy-gnome |
| ||
| libproxy-kde |
| ||
| libproxy-mozjs |
| ||
| libproxy-python |
| ||
| libproxy-webkit |
| ||
| thunderbird |
| ||
| xulrunner |
| ||
| xulrunner-devel |
| ||
| yelp |
|
Common Weakness Enumeration
References