CVE-2016-2810

Published: 30/04/2016 Updated: 01/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5 | Impact Score: 3.6 | Exploitability Score: 1.3

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Mozilla Firefox prior to 46.0 on Android prior to 5.0 allows malicious users to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Mozilla Foundation Security Advisory 2016-41 Content provider permission bypass allows malicious application to access data Announced April 26, 2016 Reporter Ken Okuyama Impact Moderate Products Firefox Fixed in ...

Mozilla Firefox before 460 on Android before 50 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password ...

CWE-264 https://bugzilla.mozilla.org/show_bug.cgi?id=1229681 http://www.mozilla.org/security/announce/2016/mfsa2016-41.html http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html http://www.securitytracker.com/id/1035692 https://security.gentoo.org/glsa/201701-15 https://nvd.nist.gov https://www.mozilla.org/en-US/security/advisories/mfsa2016-41/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-2810

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect