Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/SeaMonkey 设计错误漏洞
Vulnerability Description
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 15.0之前版本、Firefox ESR 10.0.7之前的10.x版本、SeaMonkey 2.12之前版本中存在漏洞,该漏洞源于导航不同的https网站期间,未正确处理onLocationChange事件。远程攻击者可利用该漏洞通过特制的网页欺骗地址栏中的X.509证书。
CVSS Information
N/A
Vulnerability Type
N/A