An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox < 52.
References
Link Resource
http://www.securityfocus.com/bid/96692 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037966 Third Party Advisory VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1321719 Exploit Issue Tracking Patch
https://www.mozilla.org/security/advisories/mfsa2017-05/ Vendor Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mozilla

Published: 2018-06-11T21:00:00

Updated: 2018-06-12T09:57:01

Reserved: 2017-01-13T00:00:00


Link: CVE-2017-5415

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2018-06-11T21:29:04.890

Modified: 2018-08-07T11:55:17.573


Link: CVE-2017-5415

JSON object: View

cve-icon Redhat Information

No data.

CWE