PT-2016-4935 · Mozilla+1 · Firefox+1

Jordi Chancel · Publicado 2016-01-31 · Atualizado 2024-06-15 · CVE-2016-1943

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0 on Android

Description The issue allows remote attackers to spoof the address bar. This is achieved via the scrollTo method.

Recommendations For versions prior to 44.0, update to version 44.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

CVE-2016-1943

OPENSUSE-SU-2016_0309-1

OPENSUSE-SU-2024:10071-1

Produtos afetados

Firefox

Suse

Referências · 909

• https://suse.com/security/cve/CVE-2016-1947 · Nota
• https://suse.com/security/cve/CVE-2012-0442 · Nota
• https://suse.com/security/cve/CVE-2012-1958 · Nota
• https://suse.com/security/cve/CVE-2011-2995 · Nota
• https://suse.com/security/cve/CVE-2015-0816 · Nota
• https://suse.com/security/cve/CVE-2015-7178 · Nota
• https://suse.com/security/cve/CVE-2014-1588 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2014-1574 · Nota
• https://suse.com/security/cve/CVE-2016-9902 · Nota
• https://suse.com/security/cve/CVE-2015-7203 · Nota
• https://suse.com/security/cve/CVE-2012-3967 · Nota
• https://suse.com/security/cve/CVE-2013-1705 · Nota
• https://suse.com/security/cve/CVE-2015-0812 · Nota
• https://suse.com/security/cve/CVE-2016-9077 · Nota