ID de Prueba:	1.3.6.1.4.1.25623.1.0.900446
Categoría:	Web application abuses
Título:	Firefox Status Bar Spoofing Vulnerability - Windows
Resumen:	Mozilla Firefox browser is prone to status bar spoofing vulnerability.
Descripción:	Summary: Mozilla Firefox browser is prone to status bar spoofing vulnerability. Vulnerability Insight: Firefox doesn't properly handle the crafted URL which is being displayed in the user's browser which lets the attacker perform clickjacking attack and can spoof the user redirect to a different arbitrary malformed website. Vulnerability Impact: Successful remote exploitation will let the attacker spoof the status bar information and can gain sensitive information by redirecting the authentic user to any malicious URL. Affected Software/OS: Mozilla Firefox version 3.0.5 and 2.0.0.18/19 on Windows. Solution: Upgrade to Mozilla Firefox version 3.6.3 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0253 https://www.exploit-db.com/exploits/7842 http://securityreason.com/securityalert/4936 XForce ISS Database: firefox-onclickaction-click-hijacking(48212) https://exchange.xforce.ibmcloud.com/vulnerabilities/48212
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.