A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 4.3 | MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
| Primary | 2.0 | 4.3 | MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www.securityfocus.com/bid/97940 | security@mozilla.org | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038320 | security@mozilla.org | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2017:1106 | security@mozilla.org | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1201 | security@mozilla.org | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1273537 | security@mozilla.org | Exploit Issue Tracking Patch Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2017-10/ | security@mozilla.org | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2017-12/ | security@mozilla.org | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2017-13/ | security@mozilla.org | Vendor Advisory |
| http://www.securityfocus.com/bid/97940 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1038320 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2017:1106 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2017:1201 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1273537 | af854a3a-2127-422b-91ae-364da2661108 | Exploit Issue Tracking Patch Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2017-10/ | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2017-12/ | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2017-13/ | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |