SPDY Protocol CVE-2012-4930 Information Disclosure Vulnerability
BID:55707
Info
SPDY Protocol CVE-2012-4930 Information Disclosure Vulnerability
| Bugtraq ID: | 55707 |
| Class: | Design Error |
| CVE: |
CVE-2012-4930 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 18 2012 12:00AM |
| Updated: | Mar 19 2015 09:29AM |
| Credit: | Juliano Rizzo and Thai Duong |
| Vulnerable: |
Mozilla Firefox 1.5.8 Mozilla Firefox 1.5.7 Mozilla Firefox 1.5.6 Mozilla Firefox 1.5.5 Mozilla Firefox 1.5.4 Mozilla Firefox 1.5.2 Mozilla Firefox 1.5.1 Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox 1.5 12 Mozilla Firefox 1.5 .8 Mozilla Firefox 1.5 Mozilla Firefox 1.0.8 Mozilla Firefox 1.0.7 Mozilla Firefox 1.0.6 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.4 Mozilla Firefox 1.0.3 Mozilla Firefox 1.0.2 Mozilla Firefox 1.0.1 Mozilla Firefox 1.0 Mozilla Firefox 0.10.1 Mozilla Firefox 0.9.3 Mozilla Firefox 0.9.2 Mozilla Firefox 0.9.1 Mozilla Firefox 0.9 rc Mozilla Firefox 0.9 Mozilla Firefox 0.8 Mozilla Firefox 0.6.1 Mozilla Firefox 0.0.13 Mozilla Firefox 13.0 Mozilla Firefox 12.0 Mozilla Firefox 11.0 Mozilla Firefox 10.0.2 Mozilla Firefox 10.0.1 Mozilla Firefox 10.0 Mozilla Firefox 10 Mozilla Firefox 1.8 Mozilla Firefox 1.5.3 Mozilla Firefox 1.5.0.9 Mozilla Firefox 1.5.0.7 Mozilla Firefox 1.5.0.6 Mozilla Firefox 1.5.0.5 Mozilla Firefox 1.5.0.4 Mozilla Firefox 1.5.0.3 Mozilla Firefox 1.5.0.2 Mozilla Firefox 1.5.0.11 Mozilla Firefox 1.5.0.10 Mozilla Firefox 1.5.0.1 Mozilla Firefox 1.4.1 Mozilla Firefox 0.7 Mozilla Firefox 0.6 Mozilla Firefox 0.5 Mozilla Firefox 0.4 Mozilla Firefox 0.3 Mozilla Firefox 0.2 Google Chrome 17.0.963 79 Google Chrome 17.0.963 65 Google Chrome 16.0.912 75 Google Chrome 15.0.874 102 Google Chrome 2.0.172 .43 Google Chrome 2.0.172 .37 Google Chrome 2.0.172 .33 Google Chrome 2.0.172 .31 Google Chrome 2.0.172 .30 Google Chrome 1.0.154 .61 Google Chrome 0.3.154 9 Google Chrome 0.2.149 .30 Google Chrome 0.2.149 .29 Google Chrome 0.2.149 .27 Google Chrome 2.0.172.8 Google Chrome 2.0.172.38 Google Chrome 2.0.172.28 Google Chrome 2.0.172.27 Google Chrome 2.0.172.2 Google Chrome 2.0.172 Google Chrome 2.0.170.0 Google Chrome 2.0.169.1 Google Chrome 2.0.169.0 Google Chrome 2.0.159.0 Google Chrome 2.0.158.0 Google Chrome 2.0.157.2 Google Chrome 2.0.157.0 Google Chrome 2.0.156.1 Google Chrome 19.0.1084.52 Google Chrome 19 Google Chrome 18.0.1025.168 Google Chrome 18.0.1025.162 Google Chrome 18.0.1025.151 Google Chrome 18.0.1025.142 Google Chrome 17.0.963.83 Google Chrome 17.0.963.78 Google Chrome 17.0.963.60 Google Chrome 17.0.963.56 Google Chrome 17.0.963.46 Google Chrome 16.0.912.77 Google Chrome 16.0.912.75 Google Chrome 16.0.912.63 Google Chrome 16 Google Chrome 15.0.874.121 Google Chrome 15.0.874.120 Google Chrome 14.0.835.202 Google Chrome 14.0.835.186 Google Chrome 14.0.835.163 Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10.0.648.127 Google Chrome 10 Google Chrome 1.0.154.65 Google Chrome 1.0.154.64 Google Chrome 1.0.154.59 Google Chrome 1.0.154.55 Google Chrome 1.0.154.53 Google Chrome 1.0.154.52 Google Chrome 1.0.154.48 Google Chrome 1.0.154.46 Google Chrome 1.0.154.43 Google Chrome 1.0.154.42 Google Chrome 1.0.154.39 Google Chrome 1.0.154.36 Google Chrome 0.4.154.33 Google Chrome 0.4.154.31 Google Chrome 0.4.154.22 Google Chrome 0.4.154.18 Google Chrome 0.3.154.3 Google Chrome 0.3.154.0 Google Chrome 0.2.153.1 Google Chrome 0.2.152.1 |
| Not Vulnerable: | |
Discussion
SPDY Protocol CVE-2012-4930 Information Disclosure Vulnerability
SPDY protocol is prone to an information-disclosure vulnerability.
A man-in-the-middle attacker can exploit this issue to gain access to the sensitive information that may aid in further attacks.
SPDY protocol is prone to an information-disclosure vulnerability.
A man-in-the-middle attacker can exploit this issue to gain access to the sensitive information that may aid in further attacks.
Exploit / POC
SPDY Protocol CVE-2012-4930 Information Disclosure Vulnerability
Attackers can use readily available tools to exploit this issue.
A proof-of-concept is available. Please see the references for more information.
Attackers can use readily available tools to exploit this issue.
A proof-of-concept is available. Please see the references for more information.
Solution / Fix
SPDY Protocol CVE-2012-4930 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
SPDY Protocol CVE-2012-4930 Information Disclosure Vulnerability
References:
References: