PT-2015-2622 · Mozilla+1 · Firefox+1

Muneaki Nishimura · Published 2015-11-05 · Updated 2024-12-12 · CVE-2015-7191

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 42.0 on Android

Description The issue exists due to improper restriction of URL strings, allowing a remote attacker to conduct cross-site scripting (XSS) attacks. This can be achieved through vectors involving an intent: URL and fallback navigation.

Recommendations For Mozilla Firefox versions prior to 42.0 on Android, update to version 42.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2015-11987

CVE-2015-7191

OPENSUSE-SU-2015_1942-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Affected Products

Firefox

Suse

References · 2111

• https://bdu.fstec.ru/vul/2015-11982 · Security Note
• https://bdu.fstec.ru/vul/2015-11994 · Security Note
• https://bdu.fstec.ru/vul/2015-11981 · Security Note
• https://bdu.fstec.ru/vul/2015-11995 · Security Note
• https://bdu.fstec.ru/vul/2015-11987 · Security Note
• https://bdu.fstec.ru/vul/2015-11985 · Security Note
• https://bdu.fstec.ru/vul/2015-11984 · Security Note
• https://bdu.fstec.ru/vul/2015-12008 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• http://mozilla.org/security/announce/2015/mfsa2015-125.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11989 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12004 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7191 · Security Note