Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-1937

Опубликовано: 26 янв. 2016
Источник: redhat
CVSS2: 5.1

Описание

The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.

Отчет

This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5firefoxNot affected
Red Hat Enterprise Linux 5thunderbirdNot affected
Red Hat Enterprise Linux 6firefoxNot affected
Red Hat Enterprise Linux 6thunderbirdNot affected
Red Hat Enterprise Linux 7firefoxNot affected
Red Hat Enterprise Linux 7thunderbirdNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1301823Mozilla: Missing delay following user click events in protocol handler dialog (MFSA 2016-06)

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 10 лет назад

The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.

CVSS3: 6.1
nvd
около 10 лет назад

The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.

CVSS3: 6.1
debian
около 10 лет назад

The protocol-handler dialog in Mozilla Firefox before 44.0 allows remo ...

CVSS3: 6.1
github
больше 3 лет назад

The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.

suse-cvrf
около 10 лет назад

Security update for the MozillaFirefox, mozilla-nss and mozilla-nspr

5.1 Medium

CVSS2