Gravité: : Medium
  Date du conseil: 21 juillet 2015

  Description

When a Firefox user visits a site with a url that might be deceptive, Firefox will stop the load and confirm with the user that they are really visiting the site they expected to visit. However, this same warning is not presented when an iframe on the page attempts to load such a URL.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1004371
  Trend Micro Deep Security DPI Rule Name: 1004371 - Mozilla Firefox Obfuscated URLs Within Iframes Vulnerability

  Affected software and version:

  • Mozilla Firefox