Description
Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
Advisories 1
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- 1034825 vdb-entry
- openSUSE-SU-2016:0309 vendor-advisory
- 81948 vdb-entry
- GLSA-201605-06 vendor-advisory
- http://www.mozilla.org/security/announce/2016/mfsa2016-09.html
- openSUSE-SU-2016:0306 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1228590