Sikkerhetsproblem i Firefox for Android som lar en kontrollere nettleseren via en delt Wi-Fi
A serious vulnerability has been identified in the implementation of the SSDP protocol in Firefox for Android, which is used for discovering network services in a local network. The vulnerability allows an attacker on the same local or wireless network to respond to Firefox's probe requests with a UPnP XML 'LOCATION' message containing intent commands, which can be used to open an arbitrary URI in the browser or invoke handlers of other applications. […]
