CVE-2015-4476

 

Published at: - 24-09-2015 06:59

Last modified: - 26-09-2022 05:45

Total changes: - 2

Description

Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://www.mozilla.org/security/announce/2015/mfsa2015-99.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1162372
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• 76815-
• openSUSE-SU-2015:1658-
• 1033640-

 

Keywords

NVD

 

CVE-2015-4476

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures