PT-2016-1821 · Google+1 · Android+1

Ken Okuyama + 1 · Publicado 2016-04-30 · Atualizado 2024-12-12 · CVE-2016-2810

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0

Description The issue is related to insufficient access control, allowing attackers to bypass intended Signature access requirements. This can be achieved via a crafted application that leverages content-provider permissions. As a result, an attacker could read the browser history or a saved password. The vulnerability can be exploited by a remote attacker using a specially crafted application to bypass existing access restrictions.

Recommendations For Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0, update to version 46.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2016-01154

CVE-2016-2810

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Android

Firefox

Referências · 2065

• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2022-24713 · Nota
• https://suse.com/security/cve/CVE-2014-8642 · Nota
• https://suse.com/security/cve/CVE-2012-4196 · Nota
• https://suse.com/security/cve/CVE-2015-4516 · Nota
• https://suse.com/security/cve/CVE-2019-11716 · Nota
• https://suse.com/security/cve/CVE-2023-28176 · Nota
• https://suse.com/security/cve/CVE-2021-38494 · Nota
• https://suse.com/security/cve/CVE-2012-1965 · Nota
• https://suse.com/security/cve/CVE-2009-3071 · Nota