4 matches found
Spoofing
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site...
CVE-2015-0819
The CVE-2015-0819 issue affects Mozilla Firefox and stems from UITour::onPageEvent not validating that an API call originates from a foreground tab. This can enable spoofing and clickjacking when a UITour page in a background tab is whitelisted. Affected releases are Firefox versions before 36.0;...
CVE-2015-0819
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site...
CVE-2015-0819: Undefined Security Weakness
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site...