Race condition

Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

Authentication flaw

The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses...

CVE-2015-8510

Cross-site scripting XSS vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking...

CVE-2015-8511

Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2015-8510

The vulnerability CVE-2015-8510 affects Mozilla Firefox OS (default homescreen app) via the internationalization feature. A cross-site scripting flaw exists in the Add to home screen bookmarking flow, where a crafted website mishandled during bookmarking can execute arbitrary script. Exploitation...

CVE-2015-8511

CVE-2015-8511 is a race-condition vulnerability in Mozilla Firefox OS lockscreen prior to version 2.5 that enables physically proximate attackers to bypass the device passcode. The issue is described in multiple sources as a lockscreen bypass via race conditions with unspecified vectors. Affected...

CVE-2015-8512

Summary (CVE-2015-8512) : Mozilla Firefox OS prior to version 2.5 contains a vulnerability in the lockscreen logic that does not properly restrict failed authentication attempts, enabling physically proximate attackers to gain access by brute-forcing passcodes. The issue is tied to the lockscreen...

PT-2016-3919

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5 Description The lockscreen feature does not properly restrict failed authentication attempts, making it easier for physically proximate attackers to obtain access by entering many passcode guesses...

PT-2016-3917

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5 Description A cross-site scripting XSS issue exists in the internationalization feature of the default homescreen app, allowing user-assisted remote attackers to inject arbitrary web script or HTML via ...

CVE-2015-8512: Improper Access Control

The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses...

CVE-2015-8511: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2015-8510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking...

PT-2016-3918

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5 Description A race condition exists in the lockscreen feature, allowing physically proximate attackers to bypass the intended passcode requirement. Recommendations For versions prior to 2.5, update to...

HTML injection in homescreen app bypassing DOM sanitizer — Mozilla

Mozilla fixed a bug in the l10n localization of the default homescreen app of Firefox OS reported by security researcher Muneaki Nishimura. Exploiting this issue requires tricking the user into bookmarking a specially crafted web page via the 'Add to home screen' functionality. As a result, an...

Lockscreen passcode bypass due to race condition — Mozilla

Shally Li was first to report a race condition in the lockscreen of Firefox OS that can be used to bypass the passcode lock of a Firefox OS device. Under certain circumstances on a locked device, the user will be dropped directly to the homescreen instead of being presented with the passcode inpu...

Firefox OS < 2.2 Multiple Vulnerabilities

Binary data 8878.prm...

The vulnerability of the Firefox OS operating system allows a perpetrator to gain access to protected information contained in system messages.

The vulnerability of the Firefox OS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information contained in system messages, through a specially crafted application...

The vulnerability of the Firefox OS operating system allows a hacker to inject arbitrary HTML code.

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code through a special search request executed after the browser...

The vulnerability of the Firefox OS operating system allows a hacker to circumvent existing access restrictions.

The vulnerability of the Firefox OS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to bypass existing access restrictions by conducting a type of “man-in-the-middle” attack...

The vulnerability of the Firefox OS operating system allows a hacker to bypass the password input mechanism and gain access to storage devices.

The vulnerability of the Firefox OS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass password input mechanisms and gain access to storage devices by using the device mounting interface...