medium5.3
CVE-2017-5417
When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed locati…
Impact
When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox < 52.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 52.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96692
- http://www.securitytracker.com/id/1037966
- https://bugzilla.mozilla.org/show_bug.cgi?id=791597
- https://www.mozilla.org/security/advisories/mfsa2017-05/
- http://www.securityfocus.com/bid/96692
- http://www.securitytracker.com/id/1037966
- https://bugzilla.mozilla.org/show_bug.cgi?id=791597
- https://www.mozilla.org/security/advisories/mfsa2017-05/