The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird stem from insufficient validation of input data, allowing attackers to forge updates for add-ons.

🗓️ 25 Aug 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Flaws in Firefox, Firefox Extended Support Release, and Thunderbird allow forging extension updates via the X-certificate server signed by a built-in certificate authority.

Reporter	Title	Published	Views	Family All 96
FreeBSD	mozilla -- multiple vulnerabilities	13 Sep 201600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified.	18 Jun 201800:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS	18 Jun 201800:28	–	ibm
Tenable Nessus	Mozilla Firefox ESR < 45.4 Multiple Vulnerabilities	7 Oct 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox < 49.0 Multiple Vulnerabilities	7 Oct 201600:00	–	nessus
Tenable Nessus	CentOS 5 / 6 / 7 : firefox (CESA-2016:1912)	23 Sep 201600:00	–	nessus
Tenable Nessus	Debian DLA-658-1 : icedove security update	17 Oct 201600:00	–	nessus
Tenable Nessus	Debian DSA-3674-1 : firefox-esr - security update	23 Sep 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : firefox (EulerOS-SA-2016-1046)	1 May 201700:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (2c57c47e-8bb3-4694-83c8-9fc3abad3964)	21 Sep 201600:00	–	nessus

Vulners

Node

mozilla firefox_esrRange<45.4

mozilla firefoxRange<49

mozilla thunderbirdRange<45.4

red_hat red_hat_enterprise_linuxMatch5

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

novell opensuse_leapMatch15.0

Source	Link
cvedetails	www.cvedetails.com/cve/CVE-2016-5284/
mozilla	www.mozilla.org/security/advisories/mfsa2016-86/
mozilla	www.mozilla.org/security/advisories/mfsa2016-88/
suse	www.suse.com/security/cve/CVE-2016-5284.html
access	www.access.redhat.com/security/cve/cve-2016-5284
web	www.web.nvd.nist.gov/view/vuln/detail
rhn	www.rhn.redhat.com/errata/RHSA-2016-1912.html
mozilla	www.mozilla.org/security/advisories/mfsa2016-86.html

28 Nov 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.1

CVSS 37.4

EPSS0.02373