|
Mozilla / Mozilla Firefox "onunload" SSL Certificate Spoofing
|
|
Secunia Advisory:
|
SA12160
|
|
|
Release Date:
|
2004-07-26
|
|
Last Update:
|
2004-08-05
|
|
Popularity:
|
31,947 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Spoofing
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Mozilla 0.x
Mozilla 1.0
Mozilla 1.1
Mozilla 1.2
Mozilla 1.3
Mozilla 1.4
Mozilla 1.5
Mozilla 1.6
Mozilla 1.7.x
Mozilla Firefox 0.x
Mozilla Thunderbird 0.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2004-0763
|
|
Description:
Emmanouel Kellinis has reported a vulnerability in Mozilla and Mozilla Firefox, allowing malicious sites to abuse SSL certificates of other sites.
It is possible to make the browser load a valid certificate from a trusted website by using a specially crafted "onunload" event. The problem is that Mozilla loads the certificate from a trusted website and shows the "secure padlock" while actually displaying the content of the malicious website.
The URL shown in the address bar correctly reads that of the malicious website.
This has been confirmed using Mozilla Firefox 0.9.2 and Mozilla 1.7.1 on Windows and Mozilla Firefox 0.9.1 on Linux. Other versions may also be affected.
Solution:
The vulnerability has been fixed in the following versions:
* Mozilla 1.7.2
* Mozilla Firefox 0.9.3
* Mozilla Thunderbird 0.7.3
Provided and/or discovered by:
Emmanouel Kellinis
Changelog:
2004-08-03: Added CVE reference.
2004-08-05: Updated "Solution" section. Added Mozilla Bug reference.
Original Advisory:
Emmanouel Kellinis:
http://www.cipher.org.uk/index.php?p=...g_Mozilla_FireFox_25-07-2004.advisory
Mozilla Bug Tracking System:
http://bugzilla.mozilla.org/show_bug.cgi?id=253121
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
