Mozilla Firefox Security Advisory (MFSA2016-43) - Deprecated

# SPDX-FileCopyrightText: 2021 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.2.1.2016.43");
  script_cve_id("CVE-2016-2813");
  script_tag(name:"creation_date", value:"2021-11-08 15:21:25 +0000 (Mon, 08 Nov 2021)");
  script_version("2024-04-04T05:05:25+0000");
  script_tag(name:"last_modification", value:"2024-04-04 05:05:25 +0000 (Thu, 04 Apr 2024)");
  script_tag(name:"cvss_base", value:"4.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:N/A:N");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2017-06-30 23:29:00 +0000 (Fri, 30 Jun 2017)");

  script_name("Mozilla Firefox Security Advisory (MFSA2016-43) - Deprecated");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2021 Greenbone AG");
  script_family("General");

  script_xref(name:"Advisory-ID", value:"MFSA2016-43");
  script_xref(name:"URL", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2016-43/");
  script_xref(name:"URL", value:"http://dl.acm.org/citation.cfm?id=2714650");
  script_xref(name:"URL", value:"https://bugzilla.mozilla.org/show_bug.cgi?id=1197901");

  script_tag(name:"summary", value:"This host is missing a security update for Mozilla Firefox.

  This VT has been deprecated and is therefore no longer functional.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Disclosure of user actions through JavaScript with motion and orientation sensors
Security researcher Maryam Mehrnezhad of Newcastle University, UK
reported an issue discovered by their research team, which also includes Ehsan Toreini,
Siamak F. Shahandashti, and Feng Hao. They found vulnerabilities in Firefox for Android
using orientation data and motion sensors on a mobile device's browser accessible
through JavaScript. This allows an attacker to infer touch actions on the device through
these sensors when orientation events are triggered in the browser, compromising user
privacy and including potentially revealing entered PIN code data along with other user
activities.");

  script_tag(name:"affected", value:"Firefox version(s) below 46.");

  script_tag(name:"solution", value:"The vendor has released an update. Please see the reference(s) for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version_unreliable");

  script_tag(name:"deprecated", value:TRUE);

  exit(0);
}

exit(66);