CVE:CVE-2008-2809
CNNVD:CNNVD-200807-136
Firefox是Mozilla所发布的开源WEB浏览器。
在处理由对等的可信任证书所提供的Alt Names属性方式中的漏洞可能导致执行欺骗攻击。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,and avoid the version 2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14; Upgrade mozilla geckb to a higher version than *:m8,and avoid the version *:m8; Upgrade mozilla seamonkey to a higher version than 1.0.9,1.1.5,and avoid the version (,1.0.9],1.1.5; Upgrade netscape navigator to a higher version than 9.0,and avoid the version 9.0