Mozilla Firefox CVE-2015-4476 Vulnerability
Description
Security researcher Jordi Chancel reported that on Firefox for Android, when a URL is pasted with an unknown protocol, such as secure: or httpz:, the pasted URL is shown in the addressbar but no navigation occurs. Other addressbar attributes present before this pasted URL is entered will continue to be rendered. This could lead to potential spoofing by a malicious site.
Affected Applications
Firefox