CVE-2016-5279

🗓️ 22 Sep 2016 22:00:00Reported by mozillaType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 108 Views

Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code

Reporter	Title	Published	Views	Family All 35
FreeBSD	mozilla -- multiple vulnerabilities	13 Sep 201600:00	–	freebsd
Tenable Nessus	Mozilla Firefox < 49.0 Multiple Vulnerabilities	7 Oct 201600:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (2c57c47e-8bb3-4694-83c8-9fc3abad3964)	21 Sep 201600:00	–	nessus
Tenable Nessus	GLSA-201701-15 : Mozilla Firefox, Thunderbird: Multiple vulnerabilities (SWEET32)	4 Jan 201700:00	–	nessus
Tenable Nessus	Mozilla Firefox < 49.0 Multiple Vulnerabilities (Mac OS X)	22 Sep 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox < 49 Multiple Vulnerabilities (macOS)	5 Oct 201800:00	–	nessus
Tenable Nessus	Mozilla Firefox < 49.0 Multiple Vulnerabilities	22 Sep 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox < 49 Multiple Vulnerabilities	5 Oct 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-1119)	26 Sep 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-1128)	27 Sep 201600:00	–	nessus

NVD

Node

mozilla firefoxRange≤48.0.2

Source	Link
security	www.security.gentoo.org/glsa/201701-15
securityfocus	www.securityfocus.com/bid/93052
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
securitytracker	www.securitytracker.com/id/1036852
mozilla	www.mozilla.org/security/announce/2016/mfsa2016-85.html

06 May 2026 22:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 34.3

CVSS 24.3

EPSS0.00375

CWE-200