Home

CVE-2015-4508

Description

Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.

Risk Information

Base Score
6.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.697

Associated Vulnerability

VulnerabilityOS Platform
Update for SeaMonkey (2.38)Windows
Update for Mozilla Firefox (41.0)Windows
Update for Mozilla Firefox (41.0.1)Windows
Update for Mozilla Firefox (41.0.2)Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 40.0.3Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 40.0.3Windows
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (41.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (41.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (41.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac ( 141.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (141.0.2)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (141.0.3)Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 40.0.3Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-301495Update for SeaMonkey (2.38)
PATCH-302184Update for Mozilla Firefox (41.0)
PATCH-302185Update for Mozilla Firefox (41.0.1)
PATCH-302186Update for Mozilla Firefox (41.0.2)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234