medium5.3Public exploit code
CVE-2017-5415
An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Firefox - Address Bar Spoofing2017-04-14 · local · multiple
Impact
An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox < 52.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 52.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96692
- http://www.securitytracker.com/id/1037966
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321719
- https://www.mozilla.org/security/advisories/mfsa2017-05/
- http://www.securityfocus.com/bid/96692
- http://www.securitytracker.com/id/1037966
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321719
- https://www.mozilla.org/security/advisories/mfsa2017-05/