NVD

Id
20592  
Name
CVE-2016-5268  
Description
Mozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d= substring.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-08-04  
Modified Date
2016-11-28  
Seq
2016-5268  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112744 20592 CVE-2016-5268 openSUSE-SU-2016:1964  View
112745 20592 CVE-2016-5268 openSUSE-SU-2016:2026  View
112746 20592 CVE-2016-5268 http://www.mozilla.org/security/announce/2016/mfsa2016-83.html  View
112747 20592 CVE-2016-5268 92260  View
112748 20592 CVE-2016-5268 USN-3044-1  View
112749 20592 CVE-2016-5268 https://bugzilla.mozilla.org/show_bug.cgi?id=1253673  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3386 JVNDB-2016-004159 Mozilla Firefox におけるなりすまし攻撃を実行される脆弱性 Mozilla Firefox は、エラーページに使用される about: URL の LINKABLE および URI_SAFE_FOR_UNTRUSTED_CONTENT フラグを適切に設定しないため、なりすまし攻撃を実行される脆弱性が存在します。 CVE-2016-5268 91774 CVE-2016-5268 20592 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004159.html 2016-08-02 2016-08-08 View