Mozilla Firefox Spoofing Vulnerability (CNVD-2017-10713)

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A spoofing vulnerability exists in previous versions of Mozilla Firefox 54 for Android. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Mozilla Fixes 32 Vulnerabilities in Firefox 54

Mozilla fixed 32 vulnerabilities, including a critical bug that could have resulted in a crash, with the release Tuesday of Firefox 54, the latest version of its flagship browser. The critical bug, a use-after-free vulnerability, was dug up by longtime bug hunter Nils. The vulnerability...

Mozilla: Domain spoofing with combination of Canadian Syllabics and other unicode blocks (MFSA 2017-16)

Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows...

UBUNTU-CVE-2017-7762

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox 54...

Android stock Android browser address bar spoofing vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. stock Android browser address bar is the address bar on the stock browser. An address bar spoofing vulnerability exists in the stock Android browser address bar in Android. A remo...

Google Chrome Omnibox Address Spoofing Vulnerability (CNVD-2017-09211)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. An address spoofing vulnerability exists in Omnibox in versions of Google Chrome prior to 59.0.3071.86. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Google Chrome Omnibox Address Spoofing Vulnerability (CNVD-2017-09215)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. An address spoofing vulnerability exists in Omnibox in versions of Google Chrome prior to 59.0.3071.86. An attacker can exploit the vulnerability to spoof the contents of the address bar...

Code injection

The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2015-3830

The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2015-3830

The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2015-3830

Technical details for CVE-2015-3830 are not publicly available in the provided connected documents; monitor for updates.

Apple Safari 'Safari' Component Address Forgery Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari is one of the specialized components used for the Safari browser.... An address forgery vulnerability exists in the 'Safari' component of Apple Safari...

Apple Safari 'Safari' Component Address Forgery Vulnerability (CNVD-2017-07709)

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari is one of the specialized components used for the Safari browser.... An address forgery vulnerability exists in the 'Safari' component of Apple Safari...

CVE-2017-2500

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

Code injection

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

CVE-2017-2500

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

Code injection

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

CVE-2017-2511

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

CVE-2017-2500

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

CVE-2017-2511

An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...