PT-2015-2170 · Mozilla+3 · Firefox+3
Juho Nurminen
+1
·
Published
2015-09-22
·
Updated
2024-12-12
·
CVE-2015-4508
CVSS v2.0
2.6
Low
| Vector | AV:N/AC:H/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 41.0
Description
The issue allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site when reader mode is enabled. This can be exploited by a remote attacker to manipulate the content of the window using a specially formed website, which is related to errors in security settings.
Recommendations
For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider disabling the reader mode until a patch is available. Restrict access to crafted web sites to minimize the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Firefox
Suse
Ubuntu