PT-2015-2161 · Mozilla+1 · Firefox+1
Jordi Chancel
·
Published
2015-09-24
·
Updated
2024-12-12
·
CVE-2015-4476
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 41.0 on Android
Description
The issue is related to errors in security settings, allowing a remote attacker to modify address-bar attributes after a user inputs a URL. This can be achieved by leveraging a lack of navigation after a paste of a URL with a nonstandard scheme, potentially allowing the spoofing of attributes such as SSL.
Recommendations
For Mozilla Firefox versions prior to 41.0 on Android, update to version 41.0 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox
Suse