Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5443 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.404Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Out-of-bounds write during BinHex decoding Description: An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://bugzilla.mozilla.or
ecurity/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1342661 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5444 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.255Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Buffer overflow while parsing application/http-index-format content Description: A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://bu
ional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://bugzilla.mozilla.org/show_bug.cgi?id=1344461 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5445 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:13.330Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Uninitialized values used while parsing application/http-index-format content Description: A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017
irefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://bugzilla.mozilla.org/show_bug.cgi?id=1344467 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5446 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.345Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data Description: An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-
r: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1343505 - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5447 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.298Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Out-of-bounds read during glyph processing Description: An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42071/ - https://access.redhat.com/errata/RHSA-2017:1106 -
Container: References: - https://www.exploit-db.com/exploits/42071/ - https://access.redhat.com/errata/RHSA-2017:1106 - https://bugzilla.mozilla.org/show_bug.cgi?id=1343552 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5448 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.312Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Out-of-bounds write in ClearKeyDecryptor Description: An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE P
. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://bugzilla.mozilla.org/show_bug.cgi?id=1346648
CVE ID: CVE-2017-5449 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.706Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Crash during bidirectional unicode manipulation with animation Description: A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://bugzilla.mozilla.org/show_bug.cgi?id=1340127 - https://www.mozilla.org/security/advisories/mfsa2017
-2017:1106 - https://bugzilla.mozilla.org/show_bug.cgi?id=1340127 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5450 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.709Z Vendors: Mozilla Products: Firefox Problem Types: Addressbar spoofing using javascript: URI on Firefox for Android Description: A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI. On Firefox for Android, the base domain is parsed incorrectly, making the resulting location less visibly a spoofed site and showing an incorrect domain in appended notifications. This vulnerability affects Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97
Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://bugzilla.mozilla.org/show_bug.cgi?id=1325955 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5451 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.698Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Addressbar spoofing with onblur event Description: A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - h
53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1273537 - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5452 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:15.030Z Vendors: Mozilla Products: Firefox Problem Types: Addressbar spoofing during scrolling with editable content on Firefox for Android Description: Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page element is user selected. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1344517 - https://ww
Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1344517 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5453 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.239Z Vendors: Mozilla Products: Firefox Problem Types: HTML injection into RSS Reader feed preview page through TITLE element Description: A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1321247 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http
- https://bugzilla.mozilla.org/show_bug.cgi?id=1321247 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5454 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.622Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Sandbox escape allowing file system read access through file picker Description: A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/R
1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1349276 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5455 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.417Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Sandbox escape through internal feed reader APIs Description: The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1341191 - https://access.redhat.com/errata/RHSA-2017:1106 - http
erences: - https://bugzilla.mozilla.org/show_bug.cgi?id=1341191 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5456 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.745Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Sandbox escape allowing local file system access Description: A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/s
at.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1344415 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5458 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.705Z Vendors: Mozilla Products: Firefox Problem Types: Drag and drop of javascript: URLs can allow for self-XSS Description: When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. This vulnerability affects Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1229426 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http:/
?id=1229426 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5459 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.987Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Buffer overflow in WebGL Description: A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advis
isories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1333858 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5460 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.885Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in frame selection Description: A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://
- https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1343642 - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5461 State: PUBLISHED Published: 2017-05-11T01:00:00 Last Updated: 2024-08-05T15:04:14.289Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Out-of-bounds write in Base64 encoding in NSS Description: Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201705-04 - http://www.securityfocus.com/bid/98050 - https:
am Container: References: - https://security.gentoo.org/glsa/201705-04 - http://www.securityfocus.com/bid/98050 - https://access.redhat.com/errata/RHSA-2017:1103 - http://www.debian.org/security/2017/dsa-3831 - https://access.redhat.com/errata/RHSA-2017:1100 - https://access.redhat.com/errata/RHSA-2017:1102 - https://access.redhat.com/errata/RHSA-2017:1101 - http://www.debian.org/security/2017/dsa-3872 - http://www.securitytracker.com/id/1038320 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://developer.mozilla.org/en-U
y/cpuoct2017-3236626.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.4_release_notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.5_release_notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.4_release_notes - https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5461 - https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5461 - https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/#CVE-2017-5461 - https://bugzilla.mozi
10/#CVE-2017-5461 - https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/#CVE-2017-5461 - https://bugzilla.mozilla.org/show_bug.cgi?id=1344380 - https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/#CVE-2017-5461
CVE ID: CVE-2017-5462 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.697Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: DRBG flaw in NSS Description: A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa
2.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201705-04 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://bugzilla.mozilla.org/show_bug.cgi?id=1345089 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://www.debian.org/security/2017/dsa-3872
CVE ID: CVE-2017-5463 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.311Z Vendors: Mozilla Products: Firefox Problem Types: Addressbar spoofing through reader view on Firefox for Android Description: Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1338867 - https://www.mozilla.org
s: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1338867 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - http://www.securitytracker.com/id/1038320