ISOMAN

CVE

CVE-2016-1965

Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.

Severity
MEDIUM
CVSS
4.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux7.9 x86_64 server dvdunknownsource
Oracle Linux7.9 x86_64 server bootunknownsource
Oracle Linux7.9 x86_64 server uek-bootunknownsource
Oracle Linux7.9 source source-dvd1unknownsource
Oracle Linux7.9 source source-dvd2unknownsource
Oracle Linux7.8 x86_64 server dvdunknownsource
Oracle Linux7.8 x86_64 server bootunknownsource
Oracle Linux7.8 x86_64 server uek-bootunknownsource
Oracle Linux7.8 source source-dvd1unknownsource
Oracle Linux7.8 source source-dvd2unknownsource
Oracle Linux7.7 x86_64 server dvdunknownsource
Oracle Linux7.7 x86_64 server bootunknownsource
Oracle Linux7.7 x86_64 server uek-bootunknownsource
Oracle Linux7.7 source source-dvd1unknownsource
Oracle Linux7.7 source source-dvd2unknownsource
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource
Oracle Linux7.9 aarch64 server dvdunknownsource
Oracle Linux7.9 aarch64 server uek-bootunknownsource
Oracle Linux7.8 aarch64 server dvdunknownsource
Oracle Linux7.8 aarch64 server uek-bootunknownsource
Oracle Linux7.7 aarch64 server dvdunknownsource
Oracle Linux7.7 aarch64 server uek-bootunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
  2. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
  3. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html
  4. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html
  5. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html
  6. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html
  7. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html
  8. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html
  9. http://www.debian.org/security/2016/dsa-3510
  10. http://www.mozilla.org/security/announce/2016/mfsa2016-28.html
  11. http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
  12. http://www.securitytracker.com/id/1035215
  13. http://www.ubuntu.com/usn/USN-2917-1
  14. http://www.ubuntu.com/usn/USN-2917-2
  15. http://www.ubuntu.com/usn/USN-2917-3
  16. https://bugzilla.mozilla.org/show_bug.cgi?id=1245264
  17. https://security.gentoo.org/glsa/201605-06
  18. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html
  19. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html
  20. http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html