Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 4.0 | MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:N |
CWE ID | Type | Source |
---|---|---|
CWE-264 | Primary | nvd@nist.gov |
Hyperlink | Source | Resource |
---|---|---|
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html | cve@mitre.org | N/A |
http://osvdb.org/86107 | cve@mitre.org | N/A |
http://secunia.com/advisories/50856 | cve@mitre.org | N/A |
http://www.mozilla.org/security/announce/2012/mfsa2012-78.html | cve@mitre.org | Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=778582 | cve@mitre.org | N/A |
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html | af854a3a-2127-422b-91ae-364da2661108 | N/A |
http://osvdb.org/86107 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
http://secunia.com/advisories/50856 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
http://www.mozilla.org/security/announce/2012/mfsa2012-78.html | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=778582 | af854a3a-2127-422b-91ae-364da2661108 | N/A |