Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2012-08-29T10:00:00
Updated: 2024-08-06T20:21:04.174Z
Reserved: 2012-07-11T00:00:00
Link: CVE-2012-3976
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2012-08-29T10:56:41.160
Modified: 2020-08-26T20:39:08.833
Link: CVE-2012-3976
Redhat