CVE-2015-0799

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0.1

Description The issue allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server. This is achieved by specifying the server in the uri-host field of an Alt-Svc HTTP/2 response header, thus enabling the attacker to control network traffic and modify the server address.

Recommendations For versions prior to 37.0.1, update to version 37.0.1 or later to resolve the issue.