Description
The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2015-0832 | The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site. |
Ubuntu USN |
USN-2505-1 | Firefox vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mozilla
Published:
Updated: 2024-08-06T04:26:10.698Z
Reserved: 2015-01-07T00:00:00.000Z
Link: CVE-2015-0819
No data.
Status : Modified
Published: 2015-02-25T11:59:00.047
Modified: 2026-05-06T22:30:45.220
Link: CVE-2015-0819
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Ubuntu USN