CVE-2016-2829 in Firefox

Riassunto

di MITRE

Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the microphone permission or the geolocation permission.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 01/03/2016
• Divulgazione: 13/06/2016
• Moderazione: accettato
• Voce: VDB-87898
• CPE: pronto
• CWE: CWE-284 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.01334
• KEV: no
• Attività: molto basso
• Settore: Transportation, Homeoffice, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2829
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2829
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2829/