Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade libxulUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Feb 1, 2016 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr. | Oct 30, 2017 | Jan 31, 2016 |
| Suse | — | Upgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade mozillafirefox-develUpgrade mozillafirefox-translations-common | Feb 2, 2016 | Jan 31, 2016 |
| Ubuntu | — | Upgrade firefox | Feb 2, 2016 | Jan 31, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub