CVEvulnerability
CVE-2016-1947
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-01-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.7 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-19
Description
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.04
• canonical ubuntu linux 15.10
• opensuse leap 42.1
• opensuse opensuse 13.1
• opensuse opensuse 13.2
• mozilla firefox 43.0
• mozilla firefox 43.0.1
• mozilla firefox 43.0.2
• mozilla firefox 43.0.3
• mozilla firefox 43.0.4
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html Third Party Advisory
- http://www.mozilla.org/security/announce/2016/mfsa2016-11.html Vendor Advisory
- http://www.securityfocus.com/bid/81949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034825 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2880-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2880-2 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1237103 Issue Tracking, Vendor Advisory
- https://security.gentoo.org/glsa/201605-06 Third Party Advisory, VDB Entry
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.html Third Party Advisory
- http://www.mozilla.org/security/announce/2016/mfsa2016-11.html Vendor Advisory
- http://www.securityfocus.com/bid/81949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034825 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2880-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2880-2 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1237103 Issue Tracking, Vendor Advisory
- https://security.gentoo.org/glsa/201605-06 Third Party Advisory, VDB Entry