31 Mar 2015

CVE-2015-0800

Publié par . Publié dans Gain information

Vulnerability Details : CVE-2015-0800

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.
Publish Date : 2015-04-01 Last Update Date : 2015-04-01

- CVSS Scores & Vulnerability Types

CVSS Score	5.0
Confidentiality Impact	Partial(There is considerable informational disclosure.)
Integrity Impact	None(There is no impact to the integrity of the system)
Availability Impact	None(There is no impact to the availability of the system.)
Access Complexity	Low(Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required(Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Obtain Information
CWE ID	200

- Products Affected By CVE-2015-0800

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Mozilla	Firefox	36.0.4				Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Mozilla	Firefox	1

- References For CVE-2015-0800

https://bugzilla.mozilla.org/show_bug.cgi?id=1110212 CONFIRM

http://www.mozilla.org/security/announce/2015/mfsa2015-41.html CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Mozilla Firefox 36.0.4	Google Android

- Metasploit Modules Related To CVE-2015-0800

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)

CVE-2015-0800

Vulnerability Details : CVE-2015-0800

- CVSS Scores & Vulnerability Types

- Products Affected By CVE-2015-0800

- Number Of Affected Versions By Product

- References For CVE-2015-0800

- Vulnerability Conditions

- Metasploit Modules Related To CVE-2015-0800

Pour nous Contacter

Newsletter Cybersécurité

Ressources Sécurité

Notre expertise cybersécurité validée par de multiples certifications internationales