PT-2016-1821 · Google+1 · Android+1

Ken Okuyama + 1 · Published 2016-04-30 · Updated 2024-12-12 · CVE-2016-2810

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0

Description The issue is related to insufficient access control, allowing attackers to bypass intended Signature access requirements. This can be achieved via a crafted application that leverages content-provider permissions. As a result, an attacker could read the browser history or a saved password. The vulnerability can be exploited by a remote attacker using a specially crafted application to bypass existing access restrictions.

Recommendations For Mozilla Firefox versions prior to 46.0 on Android versions prior to 5.0, update to version 46.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-01154

CVE-2016-2810

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

Affected Products

Android

Firefox

References · 2065

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201701-15 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html · Vendor Advisory
• http://mozilla.org/security/announce/2016/mfsa2016-41.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2810 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2810 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01154 · Security Note
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note
• https://suse.com/security/cve/CVE-2022-24713 · Note