Mozilla Firefox Obfuscated URLs Within Iframes Vulnerability

  Severity: MEDIUM
  Advisory Date: JUL 21, 2015

  DESCRIPTION

When a Firefox user visits a site with a url that might be deceptive, Firefox will stop the load and confirm with the user that they are really visiting the site they expected to visit. However, this same warning is not presented when an iframe on the page attempts to load such a URL.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004371
  Trend Micro Deep Security DPI Rule Name: 1004371 - Mozilla Firefox Obfuscated URLs Within Iframes Vulnerability

  AFFECTED SOFTWARE AND VERSION

  • Mozilla Firefox

Featured Stories