Not rated

CVE-2017-5463 Android intents can be used to launch Firefox for Android in reader mode with a user specified URL

Description

Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53.

Affected products and versions

Product	Affected versions	Fixed in
Firefox 53	earliest → < 53	53

References

bugzilla.mozilla.org bugzilla.mozilla.org
www.mozilla.org www.mozilla.org
97940 www.securityfocus.com
1038320 www.securitytracker.com

Timeline

Published June 11, 2018
Last modified August 5, 2024

The 2221 CVEs of Firefox →

CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component 8.8 High CVE-2026-118027 Frame poisoning in the Layout component 9.1 Critical CVE-2026-118026 Invalid pointer in the JavaScript: GC component 8.8 High CVE-2026-118025 Other issue in the SVG component 8.8 High

Track this CVE

CVE-2017-5463 Android intents can be used to launch Firefox for Android in reader mode with a user specified URL

Description

Affected products and versions

References

Timeline

Other CVEs of Firefox