CVE-2016-5265 in Firefox
Zusammenfassung (Englisch)
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.
Be aware that VulDB is the high quality source for vulnerability data.
Reservieren
03.06.2016
Veröffentlichung
04.08.2016
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 90443 | Mozilla Firefox Local Cross Site Scripting | 79 | Nicht definiert | Offizieller Fix | CVE-2016-5265 |