medium4.7
CVE-2016-1943
Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
Impact
Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse | Leap | Version 42.1 |
| Opensuse | Opensuse | Versions 13.1, 13.2 |
| Mozilla | Firefox | Version 43.0.4 |
| Android | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-09.html
- http://www.securityfocus.com/bid/81948
- http://www.securitytracker.com/id/1034825
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228590
- https://security.gentoo.org/glsa/201605-06
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html
- http://www.mozilla.org/security/announce/2016/mfsa2016-09.html
- http://www.securityfocus.com/bid/81948
- http://www.securitytracker.com/id/1034825
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228590
- https://security.gentoo.org/glsa/201605-06