Lucene search
PRIOn knowledge basePRION:CVE-2016-9895HistoryJun 11, 2018 - 9:29 p.m.
Design/Logic Flaw
2018-06-1121:29:00
PRIOn knowledge base
www.prio-n.com
3
Event handlers on “marquee” elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.
References
rhn.redhat.com/errata/RHSA-2016-2946.html
rhn.redhat.com/errata/RHSA-2016-2973.html
www.securityfocus.com/bid/94885
www.securitytracker.com/id/1037461
bugzilla.mozilla.org/show_bug.cgi?id=1312272
security.gentoo.org/glsa/201701-15
www.debian.org/security/2017/dsa-3757
www.mozilla.org/security/advisories/mfsa2016-94/
www.mozilla.org/security/advisories/mfsa2016-95/
www.mozilla.org/security/advisories/mfsa2016-96/
Related
cve
cve
CVE-2016-9895
2018-06-11 21:29:01
veracode
veracode
Cross-site Scripting (XSS)
2019-05-02 05:51:33
alpinelinux
alpinelinux
CVE-2016-9895
2018-06-11 21:29:01
debiancve
debiancve
CVE-2016-9895
2018-06-11 21:29:01
redhatcve
redhatcve
CVE-2016-9895
2016-12-14 04:48:11
cvelist
cvelist
CVE-2016-9895
2018-06-11 21:00:00
nvd
nvd
CVE-2016-9895
2018-06-11 21:29:01
ubuntucve
ubuntucve
CVE-2016-9895
2016-12-13 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2016-12-21 00:00:00
firefox security update
2016-12-14 00:00:00
nessus
nessus
CentOS 5 / 6 / 7 : thunderbird (CESA-2016:2973)
2016-12-21 00:00:00
Oracle Linux 6 / 7 : thunderbird (ELSA-2016-2973)
2016-12-22 00:00:00
redhat
redhat
(RHSA-2016:2973) Important: thunderbird security update
2016-12-21 00:00:00
(RHSA-2016:2946) Critical: firefox security update
2016-12-14 00:00:00
openvas
openvas
CentOS Update for thunderbird CESA-2016:2973 centos6
2016-12-22 00:00:00
CentOS Update for thunderbird CESA-2016:2973 centos7
2016-12-22 00:00:00
CentOS Update for thunderbird CESA-2016:2973 centos5
2016-12-22 00:00:00
centos
centos
thunderbird security update
2016-12-21 13:43:24
firefox security update
2016-12-16 14:19:50
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2017-01-06 11:28:18
Updated firefox packages fix security vulnerabilities
2016-12-15 23:33:35
Updated iceape packages fix security vulnerabilities
2017-09-02 00:10:29
debian
debian
[SECURITY] [DLA 782-1] icedove security update
2017-01-13 20:15:13
[SECURITY] [DSA 3757-1] icedove security update
2017-01-11 15:19:30
[SECURITY] [DSA 3734-1] firefox-esr security update
2016-12-14 15:26:33
osv
osv
icedove - security update
2017-01-13 00:00:00
icedove - security update
2017-01-11 00:00:00
firefox-esr - security update
2016-12-15 00:00:00
kaspersky
kaspersky
KLA10952 Multiple vulnerabilities in Mozilla Thunderbird
2016-12-28 00:00:00
KLA10913 Multiple vulnerabilities in Mozilla Firefox ESR
2016-12-13 00:00:00
KLA10912 Multiple vulnerabilities in Mozilla Firefox
2016-12-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 45.6 — Mozilla
2016-12-28 00:00:00
Security vulnerabilities fixed in Firefox ESR 45.6 — Mozilla
2016-12-13 00:00:00
Security vulnerabilities fixed in Firefox 50.1 — Mozilla
2016-12-13 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2016-12-22 02:08:43
Security update for MozillaFirefox (important)
2016-12-22 02:08:15
Security update for MozillaFirefox (important)
2016-12-21 20:08:23
ibm
ibm
freebsd
freebsd
mozilla -- multiple vulnerabilities
2016-12-13 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2016-12-13 00:00:00
Thunderbird vulnerabilities
2017-01-28 00:00:00
archlinux
archlinux
[ASA-201612-15] firefox: multiple issues
2016-12-14 00:00:00
gentoo
gentoo
Mozilla Firefox, Thunderbird: Multiple vulnerabilities
2017-01-03 00:00:00