Vulnetix
Try Vulnetix Request Demo
CVE-2009-2061 PUBLISHED CVSS 9.300000190734863 CRITICAL

Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.

EPSS 0.34% · 56.4th percentile

Risk Scores

CVSS v2.0
9.300000190734863
EPSS Score
0.34%
56.4th percentile

Affected Products

VendorProductVersions
n/an/an/a
mozillafirefox0, 0.1, 0.2

Timeline

References

Open in Interactive Console →