NetSight
IP …
medium4.3

CVE-2016-1958

browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascri…

Impact

browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.

Affected products

VendorProductAffected versions
OracleLinux
Versions 5.0, 6, 7
OpensuseOpensuse
Version 13.1
MozillaFirefox
through 44.0.2
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1

Weakness classification

CWE-254

References