Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Kenken0980

#49099of 53,632
5Total CVSS
Vulnerabilities · 1
PT-2016-1821
5.0
2016-04-30
Google · Android · CVE-2016-2810
**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0 **Description** The issue is related to insufficient access control, allowing attackers to bypass intended Signature access requirements. This can be achieved via a crafted application that leverages content-provider permissions. As a result, an attacker could read the browser history or a saved password. The vulnerability can be exploited by a remote attacker using a specially crafted application to bypass existing access restrictions. **Recommendations** For Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0, update to version 46.0 or later to resolve the issue.