Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1361996 - (CVE-2016-5268) CVE-2016-5268 Mozilla: Spoofing attack through text injection into internal error pages (MFSA 2016-83)
CVE-2016-5268 Mozilla: Spoofing attack through text injection into internal e...
Status: CLOSED NOTABUG
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,public=20160802,repor...
: Security
Depends On:
Blocks: 1360577
  Show dependency tree / graph
 
Reported: 2016-08-01 02:45 EDT by Huzaifa S. Sidhpurwala
Modified: 2016-08-03 00:58 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2016-08-03 00:57:40 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Huzaifa S. Sidhpurwala 2016-08-01 02:45:42 EDT 
Security researcher musicDespiteEverything reported that some of the special about: URLs used by Firefox to display system information or error messages can incorporate text passed as parmeters. These could be used in spoofing attacks. 


External Reference:

https://www.mozilla.org/security/announce/2016/mfsa2016-83.html


Acknowledgements:

Name: the Mozilla project
Upstream: musicDespiteEverything

Statement:

This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.