PT-2016-4932 · Mozilla · Firefox

Muneaki Nishimura · Publicado 2016-01-31 · Atualizado 2017-09-10 · CVE-2016-1940

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0 on Android

Description The issue allows remote attackers to spoof the address bar via a data: URL that is mishandled during shortcut opening or BOOKMARK intent processing.

Recommendations For Mozilla Firefox versions prior to 44.0 on Android, update to version 44.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

CVE-2016-1940

Produtos afetados

Firefox

Referências · 6

• http://securitytracker.com/id/1034825 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=1208525 · Nota
• https://security.gentoo.org/glsa/201605-06 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1940 · Aviso do Fabricante
• http://mozilla.org/security/announce/2016/mfsa2016-05.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1940 · Nota de Segurança