Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed correctly. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 51.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade firefoxUpgrade seamonkeyUpgrade firefox-esrUpgrade thunderbirdUpgrade linux-seamonkey | Jan 25, 2017 | Jan 24, 2017 |
| Suse | — | Upgrade mozillafirefox-translations-otherUpgrade mozillafirefox-develUpgrade mozillafirefox-translations-commonUpgrade mozillafirefox | Feb 2, 2017 | Jan 24, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
