PT-2018-16784 · Mozilla+1 · Firefox For Android+1

Rugk · Published 2018-03-27 · Updated 2024-12-12 · CVE-2018-5138

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 59

Description A spoofing issue can occur when a malicious site with a very long domain name is opened in an Android Custom Tab and the default browser is Firefox for Android. This could allow an attacker to spoof the page that is actually loaded and in use.

Recommendations For Firefox for Android versions prior to 59, update to version 59 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2018-1502

CVE-2018-5138

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox For Android

References · 1869

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2018-06 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5138 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10600-1 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1432624 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5138 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note
• https://suse.com/security/cve/CVE-2022-24713 · Note
• https://suse.com/security/cve/CVE-2014-8642 · Note
• https://suse.com/security/cve/CVE-2015-4516 · Note