PT-2016-3917 · Mozilla · Firefox Os

Muneaki Nishimura · Publicado 2016-01-09 · Atualizado 2016-01-14 · CVE-2015-8510

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5

Description A cross-site scripting (XSS) issue exists in the internationalization feature of the default homescreen app, allowing user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking.

Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-8510

Produtos afetados

Firefox Os

Referências · 3

• https://bugzilla.mozilla.org/show_bug.cgi?id=1190038 · Nota
• http://mozilla.org/security/announce/2015/mfsa2015-153.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8510 · Nota de Segurança