@mozilla.com.example.com leads to improper input validation.This vulnerability is known as CVE-2015-4499. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2015-4499 | Mozilla Bugzilla up to 5.0.0 Email Address Util.pm input validation (ID 133578 / BID-76713)
A vulnerability has been found in Mozilla Bugzilla up to 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the…
A vulnerability has been found in Mozilla Bugzilla up to 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file Util.pm of the component Email Address Handler. The manipulation with the input
This vulnerability is known as CVE-2015-4499. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
This vulnerability is known as CVE-2015-4499. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Workaround & Virtual-Patching empfohlen
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Öffentliche PoCs existieren. Isolieren Sie das System oder wenden Sie Micro-Segmentierungsregeln an, bis offizielle Patches vorliegen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencelists.fedoraproject.org
-
Web Referencewww.securitytracker.com
-
Web Referencebug1202447.bmoattachments.org
3 öffentliche Exploit-Referenz(en) detektiert (Full Disclosure / Bugtraq Mailing List).
PoC einsehen