Beveiligingsadvies

CVE-2016-1949

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-13 02:00:00

Laatst bijgewerkt 2024-08-05 23:10:40

Toegewezen door mozilla

CVSS-score geen score

Status PUBLISHED

Beschrijving

Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.

← Alle CVE's bekijken Bekijk op cve.org ↗