{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/2238?format=json","vulnerability_id":"VCID-c3hz-p1eg-cyev","summary":"Security researcher Mark Poticha reported an issue where\nincorrect SSL certificate information can be displayed on the addressbar,\nshowing the SSL data for a previous site while another has been loaded. This is\ncaused by two onLocationChange events being fired out of the expected order,\nleading to the displayed certificate data to not be updated. This can be used\nfor phishing attacks by allowing the user to input form or other data on a\nnewer, attacking, site while the credentials of an older site appear on the\naddressbar.","aliases":[{"alias":"CVE-2012-3976"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1025?format=json","purl":"pkg:mozilla/Firefox@15.0.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@15.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1026?format=json","purl":"pkg:mozilla/Firefox%20ESR@10.0.7","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@10.0.7"},{"url":"http://public2.vulnerablecode.io/api/packages/1029?format=json","purl":"pkg:mozilla/SeaMonkey@2.12.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@2.12.0"}],"affected_packages":[],"references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3976","reference_id":"CVE-2012-3976","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3976"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2012-69","reference_id":"mfsa2012-69","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2012-69"}],"weaknesses":[],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c3hz-p1eg-cyev"}