CVE-2015-4508
First published: Thu Sep 24 2015(Updated: )
Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <=40.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
- http://www.mozilla.org/security/announce/2015/mfsa2015-103.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/76815
- http://www.securitytracker.com/id/1033640
- http://www.ubuntu.com/usn/USN-2743-1
- http://www.ubuntu.com/usn/USN-2743-2
- http://www.ubuntu.com/usn/USN-2743-3
- http://www.ubuntu.com/usn/USN-2743-4
- https://bugzilla.mozilla.org/show_bug.cgi?id=1195976
Frequently Asked Questions
What is the severity of CVE-2015-4508?
CVE-2015-4508 has been classified as a medium severity vulnerability due to its potential to allow URL spoofing.
How do I fix CVE-2015-4508?
To fix CVE-2015-4508, upgrade Mozilla Firefox to version 41.0 or later.
What kind of attacks can exploit CVE-2015-4508?
CVE-2015-4508 can be exploited by remote attackers to spoof the relationship between the address bar URLs and the content displayed in reader mode.
Which versions of Mozilla Firefox are affected by CVE-2015-4508?
CVE-2015-4508 affects Mozilla Firefox versions before 41.0.
What does CVE-2015-4508 allow attackers to do?
CVE-2015-4508 allows attackers to create crafted websites that mislead users about the actual URL they are visiting.
- agent/references
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/first-publish-date
- agent/source
- vendor/mozilla
- canonical/mozilla firefox
- version/mozilla firefox/40.0.3