Vulnerability in Firefox for Android allows browser control via public Wi-Fi
In Firefox for Android, a serious vulnerability has been identified in the implementation of the SSDP protocol used for discovering network services in a local network. The vulnerability allows an attacker on the same local or wireless network to respond to Firefox's verification requests with a UPnP XML 'LOCATION' message containing intent commands, enabling the opening of arbitrary URIs in the browser or triggering handlers of other applications. […]
