A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade seamonkey | Mar 8, 2017 | Mar 7, 2017 |
| Mfsa2017 05 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 52.0 | Mar 8, 2017 | Mar 7, 2017 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox | Mar 15, 2017 | Mar 7, 2017 |
| Ubuntu | — | Upgrade firefox | Mar 8, 2017 | Mar 7, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub