CVE-2017-5395: Input Validation
Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed correctly. Note: This issue only affects Firefox for Android. Other operating systems are not affected.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
What is the severity of CVE-2017-5395?
The severity of CVE-2017-5395 is classified as moderate, indicating potential risk of user data exposure.
How do I fix CVE-2017-5395?
To fix CVE-2017-5395, update your Firefox for Android to version 51 or later.
What platforms are affected by CVE-2017-5395?
CVE-2017-5395 only affects Firefox for Android, and other operating systems are not impacted.
Can CVE-2017-5395 lead to phishing attacks?
Yes, CVE-2017-5395 can potentially allow for spoofing that could mislead users into phishing attacks.
Is user intervention necessary to exploit CVE-2017-5395?
Exploitation of CVE-2017-5395 requires users to navigate to malicious sites in a specific manner.