The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows attackers to cause service failures or increase their privileges.

The vulnerability of the nsCSPContext::SendReports function in the Thunderbird email client, as well as in Firefox and Firefox ESR browsers, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain increased...

CVE-2016-1954: Undefined Security Weakness

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy CSP violation report, which allows remote attackers to cause a denial of service data...