CVE-2015-5961

Published: Aug 8, 2015Modified: May 6, 2026

3.3

Vector

AV:A/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 6.5 / Impact: 2.9

Source: NVD

Description

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.

Affected (1)

Products: Mozilla: Firefox Os

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox Os	Up to 2.1.0

Related CWEs

References (6)

http://www.mozilla.org/security/announce/2015/mfsa2015-75.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/76255

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=1123433

Source: cve@mitre.org

Vendor Advisory

http://www.mozilla.org/security/announce/2015/mfsa2015-75.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/76255

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.mozilla.org/show_bug.cgi?id=1123433

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.