CVE

Id
78082  
CVE No.
CVE-2015-0819  
Status
Candidate  
Description
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714286 78082 CVE-2015-0819 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-26.html  View
714287 78082 CVE-2015-0819 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1079554  View
714288 78082 CVE-2015-0819 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714289 78082 CVE-2015-0819 GENTOO:GLSA-201504-01  View
714290 78082 CVE-2015-0819 URL:https://security.gentoo.org/glsa/201504-01  View
714291 78082 CVE-2015-0819 SUSE:openSUSE-SU-2015:0404  View
714292 78082 CVE-2015-0819 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html  View
714293 78082 CVE-2015-0819 SUSE:openSUSE-SU-2015:0570  View
714294 78082 CVE-2015-0819 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html  View
714295 78082 CVE-2015-0819 UBUNTU:USN-2505-1  View
714296 78082 CVE-2015-0819 URL:http://www.ubuntu.com/usn/USN-2505-1  View
714297 78082 CVE-2015-0819 BID:72759  View
714298 78082 CVE-2015-0819 URL:http://www.securityfocus.com/bid/72759  View
714299 78082 CVE-2015-0819 SECTRACK:1031791  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5507 JVNDB-2015-000013 shiromuku(u1)GUESTBOOK におけるクロスサイトスクリプティングの脆弱性 Perl CGI"s By Mrs.Shiromuku が提供する shiromuku(u1)GUESTBOOK は、掲示板ソフトウェアです。shiromuku(u1)GUESTBOOK には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-0871 78082 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000013.html  View