Skip to content
OpenAdvisories
Unscored CVE-2017-5463 EUVD-2017-14567GHSA-vg32-fmv3-phhm

Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the co…

Published Jun 11, 2018 · Updated Aug 5, 2024 · Assigned by mozilla

Description

Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 53 53

References