CVE

Id
84468  
CVE No.
CVE-2015-7191  
Status
Candidate  
Description
Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via vectors involving an intent: URL and fallback navigation, aka "Universal XSS (UXSS)."  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
748284 84468 CVE-2015-7191 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-125.html  View
748285 84468 CVE-2015-7191 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1208956  View
748286 84468 CVE-2015-7191 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
748287 84468 CVE-2015-7191 GENTOO:GLSA-201512-10  View
748288 84468 CVE-2015-7191 URL:https://security.gentoo.org/glsa/201512-10  View
748289 84468 CVE-2015-7191 SUSE:openSUSE-SU-2015:1942  View
748290 84468 CVE-2015-7191 URL:http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html  View
748291 84468 CVE-2015-7191 SECTRACK:1034069  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9610 JVNDB-2015-004930 Boxoft WAV to MP3 Converter におけるバッファオーバーフローの脆弱性 Boxoft WAV to MP3 Converter には、バッファオーバーフローの脆弱性が存在します。 CVE-2015-7243 84468 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004930.html  View