Vulnerability identifier: #VU46963
Vulnerability risk: Low
Exploitation vector: Network
The vulnerability allows a remote attacker to perform spoofing attack.
vulnerability exists due to way Firefox displays name of the data
origin when downloading files. A remote attacker can spoof origin of the
downloaded file and display the name of the intermediate website instead of the original source name.
Successful exploitation of this
vulnerability may allow a remote attacker to perform a phishing attack but requires that the spoofed website has an open redirect vulnerability.
Install updates from vendor's website.
Vulnerable software versions
Mozilla Firefox: 60.0 - 80.0.1
Firefox ESR: 78.0 - 78.2.0, 68.0 - 68.12.0, 60.0 - 60.9.0
Fixed software versions
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?