A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefox-esrUpgrade firefoxUpgrade linux-thunderbirdUpgrade libxulUpgrade seamonkeyUpgrade linux-firefox | Mar 8, 2017 | Mar 7, 2017 |
| Mfsa2017 05 | — | Upgrade to Mozilla Firefox version 52.0Upgrade to the latest version of Mozilla Firefox | Mar 8, 2017 | Mar 7, 2017 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox | Mar 15, 2017 | Mar 7, 2017 |
| Ubuntu | — | Upgrade firefox | Mar 8, 2017 | Mar 7, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub