PT-2015-2628 · Mozilla+1 · Firefox+1

Jordi Chancel · Published 2015-11-05 · Updated 2024-12-12 · CVE-2015-7185

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 42.0 on Android

Description The issue is related to errors in security settings, allowing remote attackers to spoof the address bar via crafted JavaScript code. This can occur when the browser exits fullscreen mode and fails to restore the address bar properly.

Recommendations For versions prior to 42.0, update to version 42.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2015-11993

CVE-2015-7185

OPENSUSE-SU-2015_1942-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Affected Products

Firefox

Suse

References · 2110

• https://bdu.fstec.ru/vul/2015-11982 · Security Note
• https://bdu.fstec.ru/vul/2015-11994 · Security Note
• https://bdu.fstec.ru/vul/2015-11981 · Security Note
• https://bdu.fstec.ru/vul/2015-11995 · Security Note
• https://bdu.fstec.ru/vul/2015-11987 · Security Note
• https://bdu.fstec.ru/vul/2015-11985 · Security Note
• https://bdu.fstec.ru/vul/2015-11984 · Security Note
• https://bdu.fstec.ru/vul/2015-12008 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11989 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12004 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11986 · Security Note
• https://bdu.fstec.ru/vul/2015-11992 · Security Note