Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2015-119

Firefox for Android addressbar can be removed after fullscreen mode

Announced
November 3, 2015
Reporter
Jordi Chancel
Impact
Moderate
Products
Firefox
Fixed in
  • Firefox 42

Description

Security researcher Jordi Chancel reported when Firefox for Android exits fullscreen mode, it can be induce through script to not restore the addressbar when the window is redrawn in normal mode. This could allow an attacker to spoof the addressbar with their own content.

This issue only affects Firefox for Android. Firefox on other operating systems is not affected.

References