CVE-2016-2810
Publication date 30 April 2016
Last updated 25 August 2025
Ubuntu priority
Description
Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| firefox | 16.04 LTS xenial |
Not affected
|
| 14.04 LTS trusty | Not in release | |
Notes
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
5.0 · Medium
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | None |
| Availability impact | None |
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N |