CVE-2013-0776
Fixed in a distro release EPSS 1%
Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, mozilla thunderbird_esr, opensuse, redhat enterprise_linux_aus, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | iceweasel | 17.0.6esr-1~deb7u1 |
| Red Hat Enterprise Linux 5 | devhelp | 0:0.12-23.el5_9 |
| Red Hat Enterprise Linux 5 | devhelp-debuginfo | 0:0.12-23.el5_9 |
| Red Hat Enterprise Linux 5 | devhelp-devel | 0:0.12-23.el5_9 |
| Red Hat Enterprise Linux 5 | firefox | 0:17.0.3-1.el5_9 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:17.0.3-1.el5_9 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:17.0.3-1.el5_9 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:17.0.3-1.el5_9 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:17.0.3-1.el5_9 |
| Red Hat Enterprise Linux 5 | yelp | 0:2.16.0-30.el5_9 |
| Red Hat Enterprise Linux 5 | yelp-debuginfo | 0:2.16.0-30.el5_9 |
| Red Hat Enterprise Linux 6 | firefox | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-bin | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-debuginfo | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-devel | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-gnome | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-kde | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-mozjs | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-python | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | libproxy-webkit | 0:0.3.0-4.el6_3 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:17.0.3-1.el6_3 |
| Red Hat Enterprise Linux 6 | yelp | 0:2.28.1-17.el6_3 |
| Red Hat Enterprise Linux 6 | yelp-debuginfo | 0:2.28.1-17.el6_3 |
| Red Hat rhel productivity 5 | thunderbird | 0:17.0.3-1.el5_9 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:17.0.3-1.el5_9 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |