CVE-2013-0776: Medium severity firefox vulnerability
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0776?
CVE-2013-0776 is classified as a moderate severity vulnerability that allows man-in-the-middle attacks.
How do I fix CVE-2013-0776?
To fix CVE-2013-0776, update your Mozilla Firefox, Thunderbird, or SeaMonkey to the latest version that addresses this vulnerability.
Which versions are affected by CVE-2013-0776?
CVE-2013-0776 affects Mozilla Firefox versions prior to 19.0, Firefox ESR versions before 17.0.3, Thunderbird versions before 17.0.3, and SeaMonkey versions before 2.16.
What type of attack is enabled by CVE-2013-0776?
CVE-2013-0776 enables man-in-the-middle attackers to spoof the address bar by modifying HTTP responses.
Is there a workaround for CVE-2013-0776 if I can't update immediately?
There is no official workaround for CVE-2013-0776, so updating to the latest version is strongly recommended.