CVE-2015-0819

The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site...

CVE-2015-0819: Undefined Security Weakness

The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site...

PT-2015-4888

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Description The issue concerns the UITour::onPageEvent function, which does not properly verify the origin of an API call, allowing remote attackers to perform spoofing and clickjacking attacks by accessi...