VULNERABILITY INTELLIGENCE
CVE-2013-0776
CVSS score4 MEDIUM
EPSS probability1.30%
CISA KEVNot currently listed
Published2013-02-19
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:N
Description
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
Weakness classification
- CWE-295: Improper Certificate Validation
Primary references
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Issue Tracking, Patch, Vendor Advisory
- security@mozilla.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory