CVE-2015-5961: Low severity mozilla firefox os vulnerability
Published Aug 8, 2015
·Updated
The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.
Affected Software
1 affected component
Mozilla Firefox OS<=2.1.0
Event History
Aug 8, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5961?
CVE-2015-5961 is classified as a high severity vulnerability that allows man-in-the-middle attacks.
2
How do I fix CVE-2015-5961?
To fix CVE-2015-5961, users should upgrade to Mozilla Firefox OS version 2.2 or later.
3
What type of attacks can exploit CVE-2015-5961?
CVE-2015-5961 can be exploited by man-in-the-middle attackers to bypass access restrictions.
4
Which versions of Mozilla Firefox OS are affected by CVE-2015-5961?
CVE-2015-5961 affects Mozilla Firefox OS versions before 2.2, specifically up to 2.1.0.
5
What component of Mozilla Firefox OS does CVE-2015-5961 affect?
CVE-2015-5961 affects the COPPA error page in the Accounts setup dialog of Mozilla Firefox OS.