Your submission was sent successfully! Close

CVE-2016-1942

Published: 26 January 2016

Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.

Priority

Medium

CVSS 3 base score: 7.4

Status

Package Release Status
firefox
Launchpad, Ubuntu, Debian
precise
Released (44.0+build3-0ubuntu0.12.04.1)
trusty Does not exist
(trusty was released [44.0+build3-0ubuntu0.14.04.1])
upstream
Released (44.0)
vivid
Released (44.0+build3-0ubuntu0.15.04.1)
wily
Released (44.0+build3-0ubuntu0.15.10.1)
thunderbird
Launchpad, Ubuntu, Debian
precise Not vulnerable

trusty Does not exist
(trusty was not-affected)
upstream Not vulnerable

vivid Not vulnerable

wily Not vulnerable