CVE-2016-1948 in Mozilla Firefox
요약 (영어)
Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme s images and colors by modifying the client-server data stream.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2016. 01. 19.
공개
2016. 01. 31.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 80695 | Mozilla Firefox Lightweight Theme 약한 암호화 | 310 | 정의되지 않음 | 공식 수정 | CVE-2016-1948 |