Lucene search

Tenable9017.PRM

HistoryDec 07, 2015 - 12:00 a.m.

Mozilla Firefox for Android < 41.0 Unknown Protocol Pasted URL Handling Spoofing

2015-12-0700:00:00

Tenable

www.tenable.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

81.0%

JSON

Versions of Mozilla Firefox for Android earlier than 41.0 are affected by a flaw in ‘mobile/android/base/IntentHelper.java’ that is triggered when loading a URI with a custom scheme. This may allow a context-dependent attacker to spoof content to the address bar. (CVE-2015-4476)

Binary data 9017.prm

VendorProductVersionCPE
mozillafirefox_mobilecpe:/a:mozilla:firefox_mobile

Vendor	Product	Version	CPE
mozilla	firefox_mobile		cpe:/a:mozilla:firefox_mobile

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4476

bugzilla.mozilla.org/show_bug.cgi?id=1162372

www.mozilla.org/en-US/security/advisories/mfsa2015-99

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

81.0%

JSON

Related for 9017.PRM