CVE-2016-5291

Опубликовано: 16 нояб. 2016

Источник: redhat

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 5	thunderbird	Not affected
Red Hat Enterprise Linux 6	thunderbird	Not affected
Red Hat Enterprise Linux 7	thunderbird	Not affected
Red Hat Enterprise Linux 5	firefox	Fixed	RHSA-2016:2780	16.11.2016
Red Hat Enterprise Linux 6	firefox	Fixed	RHSA-2016:2780	16.11.2016
Red Hat Enterprise Linux 7	firefox	Fixed	RHSA-2016:2780	16.11.2016

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1395065Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-89, MFSA 2016-90)

EPSS

Процентиль: 10%

0.00037

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2016-5291

CVSS3: 5.5

ubuntu

около 7 лет назад

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

CVE-2016-5291

CVSS3: 5.5

nvd

около 7 лет назад

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

CVE-2016-5291

CVSS3: 5.5

debian

около 7 лет назад

A same-origin policy bypass with local shortcut files to load arbitrar ...

GHSA-5rpq-63gx-j9m8

CVSS3: 5.5

github

больше 3 лет назад

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

ELSA-2016-2780

oracle-oval

почти 9 лет назад

ELSA-2016-2780: firefox security update (CRITICAL)

EPSS

Процентиль: 10%

0.00037

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2