CVE-2015-4508

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0

Description The issue allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site when reader mode is enabled. This can be exploited by a remote attacker to manipulate the content of the window using a specially formed website, which is related to errors in security settings.

Recommendations For versions prior to 41.0, update to version 41.0 or later to resolve the issue. As a temporary workaround, consider disabling the reader mode until a patch is available. Restrict access to crafted web sites to minimize the risk of exploitation.