Description (CNA)
When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox < 52.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mozilla / Firefox | affected unspecified before 52 |
CWE
No CWE identifiers supplied.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=791597
- https://www.mozilla.org/security/advisories/mfsa2017-05/
- http://www.securitytracker.com/id/1037966
- http://www.securityfocus.com/bid/96692
ADP enrichment
No English description supplied.