CVE-2004-0763 Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.
MediumCVSS 5.0
EPSS 5.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 0.9.1 | No fix listed |
| mozilla Firefox | = 0.9.2 | No fix listed |
References
- bugzilla.mozilla.org patch vendor-advisory
- 20040725 Mozilla Firefox Certificate Spoofing mailing-list
- 20040726 Mozilla Firefox Certificate Spoofing mailing-list
- FLSA:2089 vendor-advisory
- 12160 third-party-advisory vendor-advisory
- www.cipher.org.uk
- GLSA-200408-22 vendor-advisory
- www.mozilla.org
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- 15495 vdb-entry
- mozilla-ssl-certificate-spoofing(16796) vdb-entry
- oval:org.mitre.oval:def:3989 signature vdb-entry
- oval:org.mitre.oval:def:9436 signature vdb-entry