Vulnerability Description
The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox Os | <= 2.1.0 |
Related Weaknesses (CWE)
References
- http://www.mozilla.org/security/announce/2015/mfsa2015-75.html
- http://www.securityfocus.com/bid/76255
- https://bugzilla.mozilla.org/show_bug.cgi?id=1123433Vendor Advisory
- http://www.mozilla.org/security/announce/2015/mfsa2015-75.html
- http://www.securityfocus.com/bid/76255
- https://bugzilla.mozilla.org/show_bug.cgi?id=1123433Vendor Advisory
FAQ
What is CVE-2015-5961?
CVE-2015-5961 is a vulnerability with a CVSS score of 3.3 (LOW). The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to b...
How severe is CVE-2015-5961?
CVE-2015-5961 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5961?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox Os.