Description
The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification.
References
- oval:org.mitre.oval:def:12251 vdb-entry signature
- 69758 vdb-entry
- SUSE-SR:2010:024 vendor-advisory
- https://wiki.mozilla.org/Platform/2010-12-07