CVE-2016-5295 in Firefox

Prediction

by VulDB Data Team • 01/31/2018

A vulnerability was determined in Mozilla Firefox up to 49 on Windows. Impacted is an unknown function of the component Updater. This manipulation causes improper access controls. The attack is possible to be carried out remotely. Upgrading to version 50 is recommended to address this issue. Upgrading the affected component is recommended.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Disclosure: 06/11/2018
• Moderation: accepted
• Entry: VDB-93638
• CPE: ready
• CWE: CWE-264 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00080
• KEV: no
• Activities: very low
• Sector: Lawfirm, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5295
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5295
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5295/