Mozilla Firefox ESR RSA Spoof Vulnerability September14 (Windows)

  1. Network Vulnerabilities
  2. General
  3. Mozilla Firefox ESR RSA Spoof Vulnerability September14 (Windows)
Summary
This host is installed with Mozilla Firefox ESR and is prone to spoof vulnerability.
Impact
Successful exploitation will allow attackers to conduct spoofing attacks. Impact Level: Application
Solution
Upgrade to Mozilla Firefox ESR version 24.8.1 or 31.1.1 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html
Insight
Flaw exists due to improper handling of ASN.1 values while parsing RSA signature
Affected
Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1 on Windows
Detection
Get the installed version with the help of detect NVT and check the version is vulnerable or not.
References
Updated on 2017-03-28
Severity
High Severity
Classification
Related Vulnerabilities