PT-2016-4929 · Mozilla+3 · Firefox+3

Chrometot · Published 2016-01-26 · Updated 2024-12-12 · CVE-2016-1937

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 44.0

Description The issue allows remote attackers to conduct clickjacking attacks via a crafted web site. This is achieved by triggering a single-click action in a situation where a double-click action was intended, exploiting the protocol-handler dialog in the browser.

Recommendations For versions prior to 44.0, update to version 44.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2016-1057

ALT-PU-2016-1454

CVE-2016-1937

OPENSUSE-SU-2016_0309-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

USN-2880-1

USN-2880-2

Affected Products

Alt Linux

Firefox

Suse

Ubuntu

References · 2088

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2016-06 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1937 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1939 · Vendor Advisory
• https://security.gentoo.org/glsa/201605-06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1937 · Vendor Advisory
• http://ubuntu.com/usn/USN-2880-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1930 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1933 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1937 · Security Note
• https://ubuntu.com/security/CVE-2016-1946 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1944 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1937 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1935 · Vendor Advisory