Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
No port is within the affected range.
no CVE referenced