KLA10909 Security vulnerabilitity in Mozilla Firefox

🗓️ 28 Nov 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 47 Views

A vulnerability found in Mozilla Firefox 49 and 50 allows privilege escalation by exploiting same-origin violations when loading resources from malicious sites through redirection from HTTP to data: URL

Reporter	Title	Published	Views	Family All 37
Tenable Nessus	Mozilla Firefox < 50.0.1 Authentication Bypass	5 Jan 201700:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- data: URL can inherit wrong origin after an HTTP redirect (f90fce70-ecfa-4f4d-9ee8-c476dbf4bf0e)	29 Nov 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox 49.x < 50.0.1 HTTP Redirect Handling Same-origin Policy Bypass	1 Dec 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox 49.x < 50.0.1 HTTP Redirect Handling Same-origin Policy Bypass	1 Dec 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : MozillaFirefox (openSUSE-2016-1392)	6 Dec 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : Mozilla Firefox / Thunderbird and NSS (openSUSE-2016-1407)	7 Dec 201600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3140-1)	1 Dec 201600:00	–	nessus
ArchLinux	[ASA-201612-1] firefox: multiple issues	1 Dec 201600:00	–	archlinux
CNVD	Mozilla Firefox URL Redirection Vulnerability	2 Dec 201600:00	–	cnvd
Check Point Advisories	Firefox SVG Cross-Domain Cookie Setting (CVE-2016-9078)	17 Aug 201700:00	–	checkpoint_advisories

Source	Link
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2016-91/
threats	www.threats.kaspersky.com/en/product/Mozilla-Firefox/
statistics	www.statistics.securelist.com/

22 Jan 2024 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS 26.8

CVSS 38.8

EPSS0.01176