製品・ソフトウェアに関する情報

JVN脆弱性詳細

Android 上で稼動する Mozilla Firefox におけるアドレスバーを偽装される脆弱性

Title	Android 上で稼動する Mozilla Firefox におけるアドレスバーを偽装される脆弱性
Summary	Android 上で稼動する Mozilla Firefox には、アドレスバーを偽装される脆弱性が存在します。
Possible impacts	第三者により、画面外にアドレスバーを隠された後、実際のアドレスバーを再表示させることを妨げる DOM イベントを使用する巧妙に細工された JavaScript コードを介して、アドレスバーを偽装される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 29, 2014, midnight
Registration Date	May 1, 2014, 7:35 p.m.
Last Update	May 1, 2014, 7:35 p.m.

CVSS2.0 : 警告
Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected System

Mozilla Foundation

Mozilla Firefox 29.0 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-1527	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1527
National Vulnerability Database (NVD)
2	CVE-2014-1527	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1527

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Mozilla Foundation Security Advisory
1	MFSA2014-40	http://www.mozilla.org/security/announce/2014/mfsa2014-40.html
Mozilla Foundation セキュリティアドバイザリ
2	MFSA2014-40	http://www.mozilla-japan.org/security/announce/2014/mfsa2014-40.html

Change Log

No	Changed Details	Date of change
0	[2014年05月01日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2014-1527

Summary	Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scrolling has taken it off of the screen.
Publication Date	April 30, 2014, 7:49 p.m.
Registration Date	Jan. 26, 2021, 3:06 p.m.
Last Update	Nov. 21, 2024, 11:04 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:fedoraproject:fedora:19:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:mozilla:firefox::::::::			28.0
cpe:2.3:a:mozilla:firefox:0.1:::::::*
cpe:2.3:a:mozilla:firefox:0.2:::::::*
cpe:2.3:a:mozilla:firefox:0.3:::::::*
cpe:2.3:a:mozilla:firefox:0.4:::::::*
cpe:2.3:a:mozilla:firefox:0.5:::::::*
cpe:2.3:a:mozilla:firefox:0.6:::::::*
cpe:2.3:a:mozilla:firefox:0.6.1:::::::*
cpe:2.3:a:mozilla:firefox:0.7:::::::*
cpe:2.3:a:mozilla:firefox:0.7.1:::::::*
cpe:2.3:a:mozilla:firefox:0.8:::::::*
cpe:2.3:a:mozilla:firefox:0.9:::::::*
cpe:2.3:a:mozilla:firefox:0.9:rc::::::
cpe:2.3:a:mozilla:firefox:0.9.1:::::::*
cpe:2.3:a:mozilla:firefox:0.9.2:::::::*
cpe:2.3:a:mozilla:firefox:0.9.3:::::::*
cpe:2.3:a:mozilla:firefox:0.10:::::::*
cpe:2.3:a:mozilla:firefox:0.10.1:::::::*
cpe:2.3:a:mozilla:firefox:1.0:::::::*
cpe:2.3:a:mozilla:firefox:1.0:preview_release::::::
cpe:2.3:a:mozilla:firefox:1.0.1:::::::*
cpe:2.3:a:mozilla:firefox:1.0.2:::::::*
cpe:2.3:a:mozilla:firefox:1.0.3:::::::*
cpe:2.3:a:mozilla:firefox:1.0.4:::::::*
cpe:2.3:a:mozilla:firefox:1.0.5:::::::*
cpe:2.3:a:mozilla:firefox:1.0.6:::::::*
cpe:2.3:a:mozilla:firefox:1.0.7:::::::*
cpe:2.3:a:mozilla:firefox:1.0.8:::::::*
cpe:2.3:a:mozilla:firefox:1.5:::::::*
cpe:2.3:a:mozilla:firefox:1.5:beta1::::::
cpe:2.3:a:mozilla:firefox:1.5:beta2::::::
cpe:2.3:a:mozilla:firefox:1.5.0.1:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.3:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.4:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.5:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.6:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.7:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.8:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.9:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.10:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.11:::::::*
cpe:2.3:a:mozilla:firefox:1.5.0.12:::::::*
cpe:2.3:a:mozilla:firefox:1.5.1:::::::*
cpe:2.3:a:mozilla:firefox:1.5.2:::::::*
cpe:2.3:a:mozilla:firefox:1.5.3:::::::*
cpe:2.3:a:mozilla:firefox:1.5.4:::::::*
cpe:2.3:a:mozilla:firefox:1.5.5:::::::*
cpe:2.3:a:mozilla:firefox:1.5.6:::::::*
cpe:2.3:a:mozilla:firefox:1.5.7:::::::*
cpe:2.3:a:mozilla:firefox:1.5.8:::::::*
cpe:2.3:a:mozilla:firefox:2.0:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.6:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.7:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.8:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.9:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.10:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.11:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.12:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.13:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.14:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.15:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.16:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.17:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.18:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.19:::::::*
cpe:2.3:a:mozilla:firefox:2.0.0.20:::::::*
cpe:2.3:a:mozilla:firefox:3.0:::::::*
cpe:2.3:a:mozilla:firefox:3.0.1:::::::*
cpe:2.3:a:mozilla:firefox:3.0.2:::::::*
cpe:2.3:a:mozilla:firefox:3.0.3:::::::*
cpe:2.3:a:mozilla:firefox:3.0.4:::::::*
cpe:2.3:a:mozilla:firefox:3.0.5:::::::*
cpe:2.3:a:mozilla:firefox:3.0.6:::::::*
cpe:2.3:a:mozilla:firefox:3.0.7:::::::*
cpe:2.3:a:mozilla:firefox:3.0.8:::::::*
cpe:2.3:a:mozilla:firefox:3.0.9:::::::*
cpe:2.3:a:mozilla:firefox:3.0.10:::::::*
cpe:2.3:a:mozilla:firefox:3.0.11:::::::*
cpe:2.3:a:mozilla:firefox:3.0.12:::::::*
cpe:2.3:a:mozilla:firefox:3.0.13:::::::*
cpe:2.3:a:mozilla:firefox:3.0.14:::::::*
cpe:2.3:a:mozilla:firefox:3.0.15:::::::*
cpe:2.3:a:mozilla:firefox:3.0.16:::::::*
cpe:2.3:a:mozilla:firefox:3.0.17:::::::*
cpe:2.3:a:mozilla:firefox:3.0.18:::::::*
cpe:2.3:a:mozilla:firefox:3.0.19:::::::*
cpe:2.3:a:mozilla:firefox:3.5:::::::*
cpe:2.3:a:mozilla:firefox:3.5.1:::::::*
cpe:2.3:a:mozilla:firefox:3.5.2:::::::*
cpe:2.3:a:mozilla:firefox:3.5.3:::::::*
cpe:2.3:a:mozilla:firefox:3.5.4:::::::*
cpe:2.3:a:mozilla:firefox:3.5.5:::::::*
cpe:2.3:a:mozilla:firefox:3.5.6:::::::*
cpe:2.3:a:mozilla:firefox:3.5.7:::::::*
cpe:2.3:a:mozilla:firefox:3.5.8:::::::*
cpe:2.3:a:mozilla:firefox:3.5.9:::::::*
cpe:2.3:a:mozilla:firefox:3.5.10:::::::*
cpe:2.3:a:mozilla:firefox:3.5.11:::::::*
cpe:2.3:a:mozilla:firefox:3.5.12:::::::*
cpe:2.3:a:mozilla:firefox:3.5.13:::::::*
cpe:2.3:a:mozilla:firefox:3.5.14:::::::*
cpe:2.3:a:mozilla:firefox:3.5.15:::::::*
cpe:2.3:a:mozilla:firefox:3.5.16:::::::*
cpe:2.3:a:mozilla:firefox:3.5.17:::::::*
cpe:2.3:a:mozilla:firefox:3.5.18:::::::*
cpe:2.3:a:mozilla:firefox:3.5.19:::::::*
cpe:2.3:a:mozilla:firefox:3.6:::::::*
cpe:2.3:a:mozilla:firefox:3.6.2:::::::*
cpe:2.3:a:mozilla:firefox:3.6.3:::::::*
cpe:2.3:a:mozilla:firefox:3.6.4:::::::*
cpe:2.3:a:mozilla:firefox:3.6.6:::::::*
cpe:2.3:a:mozilla:firefox:3.6.7:::::::*
cpe:2.3:a:mozilla:firefox:3.6.8:::::::*
cpe:2.3:a:mozilla:firefox:3.6.9:::::::*
cpe:2.3:a:mozilla:firefox:3.6.10:::::::*
cpe:2.3:a:mozilla:firefox:3.6.11:::::::*
cpe:2.3:a:mozilla:firefox:3.6.12:::::::*
cpe:2.3:a:mozilla:firefox:3.6.13:::::::*
cpe:2.3:a:mozilla:firefox:3.6.14:::::::*
cpe:2.3:a:mozilla:firefox:3.6.15:::::::*
cpe:2.3:a:mozilla:firefox:3.6.16:::::::*
cpe:2.3:a:mozilla:firefox:3.6.17:::::::*
cpe:2.3:a:mozilla:firefox:3.6.18:::::::*
cpe:2.3:a:mozilla:firefox:3.6.19:::::::*
cpe:2.3:a:mozilla:firefox:3.6.20:::::::*
cpe:2.3:a:mozilla:firefox:3.6.21:::::::*
cpe:2.3:a:mozilla:firefox:3.6.22:::::::*
cpe:2.3:a:mozilla:firefox:3.6.23:::::::*
cpe:2.3:a:mozilla:firefox:3.6.24:::::::*
cpe:2.3:a:mozilla:firefox:3.6.25:::::::*
cpe:2.3:a:mozilla:firefox:3.6.26:::::::*
cpe:2.3:a:mozilla:firefox:3.6.27:::::::*
cpe:2.3:a:mozilla:firefox:3.6.28:::::::*
cpe:2.3:a:mozilla:firefox:4.0:beta6::::::
cpe:2.3:a:mozilla:firefox:4.0:beta1::::::
cpe:2.3:a:mozilla:firefox:4.0:beta9::::::
cpe:2.3:a:mozilla:firefox:4.0:beta5::::::
cpe:2.3:a:mozilla:firefox:4.0:beta8::::::
cpe:2.3:a:mozilla:firefox:4.0:beta12::::::
cpe:2.3:a:mozilla:firefox:4.0:beta3::::::
cpe:2.3:a:mozilla:firefox:4.0:::::::*
cpe:2.3:a:mozilla:firefox:4.0:beta10::::::
cpe:2.3:a:mozilla:firefox:4.0:beta2::::::
cpe:2.3:a:mozilla:firefox:4.0:beta4::::::
cpe:2.3:a:mozilla:firefox:4.0:beta11::::::
cpe:2.3:a:mozilla:firefox:4.0:beta7::::::
cpe:2.3:a:mozilla:firefox:4.0.1:::::::*
cpe:2.3:a:mozilla:firefox:5.0:::::::*
cpe:2.3:a:mozilla:firefox:5.0.1:::::::*
cpe:2.3:a:mozilla:firefox:6.0:::::::*
cpe:2.3:a:mozilla:firefox:6.0.1:::::::*
cpe:2.3:a:mozilla:firefox:6.0.2:::::::*
cpe:2.3:a:mozilla:firefox:7.0:::::::*
cpe:2.3:a:mozilla:firefox:7.0.1:::::::*
cpe:2.3:a:mozilla:firefox:8.0:::::::*
cpe:2.3:a:mozilla:firefox:8.0.1:::::::*
cpe:2.3:a:mozilla:firefox:9.0:::::::*
cpe:2.3:a:mozilla:firefox:9.0.1:::::::*
cpe:2.3:a:mozilla:firefox:10.0:::::::*
cpe:2.3:a:mozilla:firefox:10.0.1:::::::*
cpe:2.3:a:mozilla:firefox:10.0.2:::::::*
cpe:2.3:a:mozilla:firefox:10.0.3:::::::*
cpe:2.3:a:mozilla:firefox:10.0.4:::::::*
cpe:2.3:a:mozilla:firefox:10.0.5:::::::*
cpe:2.3:a:mozilla:firefox:10.0.6:::::::*
cpe:2.3:a:mozilla:firefox:10.0.7:::::::*
cpe:2.3:a:mozilla:firefox:10.0.8:::::::*
cpe:2.3:a:mozilla:firefox:10.0.9:::::::*
cpe:2.3:a:mozilla:firefox:10.0.10:::::::*
cpe:2.3:a:mozilla:firefox:10.0.11:::::::*
cpe:2.3:a:mozilla:firefox:10.0.12:::::::*
cpe:2.3:a:mozilla:firefox:11.0:::::::*
cpe:2.3:a:mozilla:firefox:12.0:::::::*
cpe:2.3:a:mozilla:firefox:12.0:beta6::::::
cpe:2.3:a:mozilla:firefox:13.0:::::::*
cpe:2.3:a:mozilla:firefox:13.0.1:::::::*
cpe:2.3:a:mozilla:firefox:14.0:::::::*
cpe:2.3:a:mozilla:firefox:14.0.1:::::::*
cpe:2.3:a:mozilla:firefox:15.0:::::::*
cpe:2.3:a:mozilla:firefox:15.0.1:::::::*
cpe:2.3:a:mozilla:firefox:16.0:::::::*
cpe:2.3:a:mozilla:firefox:16.0.1:::::::*
cpe:2.3:a:mozilla:firefox:16.0.2:::::::*
cpe:2.3:a:mozilla:firefox:17.0.2:::::::*
cpe:2.3:a:mozilla:firefox:17.0.3:::::::*
cpe:2.3:a:mozilla:firefox:17.0.4:::::::*
cpe:2.3:a:mozilla:firefox:17.0.5:::::::*
cpe:2.3:a:mozilla:firefox:17.0.6:::::::*
cpe:2.3:a:mozilla:firefox:17.0.7:::::::*
cpe:2.3:a:mozilla:firefox:17.0.8:::::::*
cpe:2.3:a:mozilla:firefox:17.0.9:::::::*
cpe:2.3:a:mozilla:firefox:17.0.10:::::::*
cpe:2.3:a:mozilla:firefox:17.0.11:::::::*
cpe:2.3:a:mozilla:firefox:18.0:::::::*
cpe:2.3:a:mozilla:firefox:18.0.1:::::::*
cpe:2.3:a:mozilla:firefox:18.0.2:::::::*
cpe:2.3:a:mozilla:firefox:19.0:::::::*
cpe:2.3:a:mozilla:firefox:19.0.1:::::::*
cpe:2.3:a:mozilla:firefox:19.0.2:::::::*
cpe:2.3:a:mozilla:firefox:20.0:::::::*
cpe:2.3:a:mozilla:firefox:20.0.1:::::::*
cpe:2.3:a:mozilla:firefox:21.0:::::::*
cpe:2.3:a:mozilla:firefox:23.0:::::::*
cpe:2.3:a:mozilla:firefox:23.0.1:::::::*
cpe:2.3:a:mozilla:firefox:24.0:::::::*
cpe:2.3:a:mozilla:firefox:24.1:::::::*
cpe:2.3:a:mozilla:firefox:24.1.1:::::::*
cpe:2.3:a:mozilla:firefox:25.0:::::::*
cpe:2.3:a:mozilla:firefox:25.0.1:::::::*
cpe:2.3:a:mozilla:firefox:26.0:::::::*
cpe:2.3:a:mozilla:firefox:27.0:::::::*
cpe:2.3:a:mozilla:firefox:27.0.1:::::::*
execution environment
1	cpe:2.3:o:google:android::::::::

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:oracle:solaris:11.3:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html	Third Party Advisory
2	http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html	Third Party Advisory
3	http://www.mozilla.org/security/announce/2014/mfsa2014-40.html	Vendor Advisory
4	http://www.mozilla.org/security/announce/2014/mfsa2014-40.html	Vendor Advisory
5	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	Third Party Advisory
6	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	Third Party Advisory
7	http://www.securitytracker.com/id/1030163	Third Party Advisory VDB Entry
8	http://www.securitytracker.com/id/1030163	Third Party Advisory VDB Entry
9	https://bugzilla.mozilla.org/show_bug.cgi?id=960146	Issue Tracking
10	https://bugzilla.mozilla.org/show_bug.cgi?id=960146	Issue Tracking

Common Vulnerabilities List