CVE-2016-5295 in Firefox

Prediction

by VulDB Data Team • 01/31/2018

A vulnerability was determined in Mozilla Firefox up to 49 on Windows. Impacted is an unknown function of the component Updater. This manipulation causes improper access controls. The attack is possible to be carried out remotely. Upgrading to version 50 is recommended to address this issue. Upgrading the affected component is recommended.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Disclosure: 06/11/2018
• Moderation: accepted
• Entry: VDB-93638
• CPE: ready
• CWE: CWE-264 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00326
• KEV: no
• Activities: very low
• Sector: Telecommunication, Energy, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5295
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5295
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5295/