cbcvebase.
CVE-2014-1527
published 2014-04-30

CVE-2014-1527: Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the…

PriorityP421medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.49%
71.3th percentile
Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.

Affected

203 ranges· showing 25
VendorProductVersion rangeFixed in
fedoraprojectfedora——
mozillafirefox<= 28.0—
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.