Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.

Project Subscriptions

Vendors Products
Fedoraproject Subscribe
Android Subscribe
Mozilla Subscribe
Firefox Subscribe
Solaris Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2014-1603 Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2024-08-06T09:42:36.115Z

Reserved: 2014-01-16T00:00:00.000Z

Link: CVE-2014-1527

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-04-30T10:49:04.910

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-1527

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses