Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade libxulUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox-esr | Dec 10, 2025 | Feb 1, 2016 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Jan 31, 2016 |
| Mfsa2016 09 | — | Upgrade to Mozilla Firefox version 44.0Upgrade to the latest version of Mozilla Firefox | Jan 26, 2016 | Jan 26, 2016 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-devel | Feb 2, 2016 | Jan 31, 2016 |
| Ubuntu | — | Upgrade firefox | Feb 2, 2016 | Jan 31, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub