CVE-2012-3976: Infoleak
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3976?
CVE-2012-3976 is rated as a high severity vulnerability due to the potential for remote attackers to spoof X.509 certificate information.
How do I fix CVE-2012-3976?
To fix CVE-2012-3976, update Mozilla Firefox to version 15.0 or later, or upgrade to Firefox ESR version 10.0.7 or later.
What versions of Firefox are affected by CVE-2012-3976?
CVE-2012-3976 affects Mozilla Firefox versions prior to 15.0 and Firefox ESR versions 10.x before 10.0.7.
Can SeaMonkey users be affected by CVE-2012-3976?
Yes, SeaMonkey versions before 2.12 are also affected by CVE-2012-3976 and should be updated to a newer version.
What is the impact of CVE-2012-3976 on users?
The impact of CVE-2012-3976 allows remote attackers to deceive users by spoofing certificate information in the address bar, potentially leading to phishing attacks.