CVE-2017-5392

Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This...

Mozilla Firefox Spoofing Vulnerability (CNVD-2017-10713)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A spoofing vulnerability exists in previous versions of Mozilla Firefox 54 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Unspecified Vulnerability in Mozilla Firefox for Android

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 53 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Unspecified Vulnerability in Mozilla Firefox for Android (CNVD-2017-07065)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 53 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...

CVE-2016-5267

Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set...

Mozilla Firefox Privilege Bypass Vulnerability

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A privilege bypass vulnerability exists in Mozilla Firefox versions prior to 46.0 on Android platforms prior to version 5.0. An attacker can exploit this vulnerability to...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-00847)

Mozilla Firefox on Android is an open source web browser for the Android platform. The 'MoofParser::Metadata' function in the binding/MoofParser.cpp file in the Mozilla Firefox libstagefright library fails to limit the size of the result of a read operation, allowing remote attackers to conduct...

Mozilla Firefox Address Bar Forgery Vulnerability (CNVD-2016-00850)

Mozilla Firefox on Android is an open source web browser for the Android platform. A security vulnerability exists in Mozilla Firefox that allows remote attackers to spoof the contents of the address bar by tricking users into copying the wyciwyg: URI or resource: URI link...

Mozilla Firefox Spoofing Vulnerability (CNVD-2016-00905)

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox on Android prior to version 44.0. A remote attacker can exploit the vulnerability by spoofing the address bar with a data...

CVE-2016-1948

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream...

CVE-2016-1943

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method...

CVE-2016-1948

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream...

Mozilla Firefox for Android < 41.0 Unknown Protocol Pasted URL Handling Spoofing

Binary data 9017.prm...

CVE-2015-2714

Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READLOGS permission for the...

Mozilla Firefox for Android DNS Spoofing Vulnerability

Mozilla Firefox is a popular web browser, and Google Android is a Linux-based open source operating system used mainly in portable devices. A security vulnerability exists in Mozilla Firefox for Android DNS resolution, as the PRNG implementation in DNS resolver fails to correctly use time and PID...

CVE-2014-1566

Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. NOTE: this vulnerability exists because o...

Mozilla Firefox for Android < 28.0 Multiple Vulnerabilities

Binary data 8174.prm...

CVE-2014-1501

Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection...