CVE-2014-1527 — Mozilla Firefox vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.8%
top 25.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxFedoraproject FedoraOracle Solaris
Timeline
PublishedApr 30
Latest updateMay 17

Description

Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDmozilla/firefox28.0+200
▶NVDoracle/solaris11.3

Also affects: Fedora 19

🔴Vulnerability Details

1
GHSA
GHSA-jcrq-4mhc-3gcc: Mozilla Firefox before 29↗2022-05-17
▶
CVE-2014-1527 — Mozilla Firefox vulnerability | cvebase