PT-2018-16784 · Mozilla+1 · Firefox For Android+1

Rugk · Publicado 2018-03-27 · Atualizado 2024-12-12 · CVE-2018-5138

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 59

Description A spoofing issue can occur when a malicious site with a very long domain name is opened in an Android Custom Tab and the default browser is Firefox for Android. This could allow an attacker to spoof the page that is actually loaded and in use.

Recommendations For Firefox for Android versions prior to 59, update to version 59 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1502

CVE-2018-5138

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Alt Linux

Firefox For Android

Referências · 1869

• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2022-24713 · Nota
• https://suse.com/security/cve/CVE-2014-8642 · Nota
• https://suse.com/security/cve/CVE-2015-4516 · Nota
• https://suse.com/security/cve/CVE-2019-11716 · Nota
• https://suse.com/security/cve/CVE-2023-28176 · Nota
• https://suse.com/security/cve/CVE-2021-38494 · Nota
• https://suse.com/security/cve/CVE-2012-1965 · Nota
• https://suse.com/security/cve/CVE-2013-1687 · Nota
• https://suse.com/security/cve/CVE-2020-6822 · Nota