CVE-2016-1965

Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.

Score

CVSS 3.0 4.3 Medium

Status

Modified - security@mozilla.org

Published

2016-03-13

Last modified

2024-08-05

Weaknesses

CWE-254

Affected products

• Firefox (Mozilla)
• Opensuse (Opensuse)
• Linux (Oracle)

References

• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
• http://www.debian.org/security/2016/dsa-3510
• http://www.mozilla.org/security/announce/2016/mfsa2016-28.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
• http://www.securitytracker.com/id/1035215
• http://www.ubuntu.com/usn/USN-2917-1
• http://www.ubuntu.com/usn/USN-2917-2
• http://www.ubuntu.com/usn/USN-2917-3
• https://bugzilla.mozilla.org/show_bug.cgi?id=1245264
• https://security.gentoo.org/glsa/201605-06