CVE-2016-1940 — Vulnetix

CVE-2016-1940 PUBLISHED CVSS 5 MEDIUM

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during (1) shortcut opening or (2) BOOKMARK intent processing.

EPSS 0.32% · 55.7th percentile

Risk Scores

CVSS 2.0

EPSS Score

0.32%

55.7th percentile

Affected Products

Vendor	Product	Versions
mozilla	firefox	0
google	android
n/a	n/a	n/a

Exploit Intelligence

1034825 (circl)
https://bugzilla.mozilla.org/show_bug.cgi?id=1208525 (circl)
http://www.mozilla.org/security/announce/2016/mfsa2016-05.html (circl)
GLSA-201605-06 (circl)

Timeline

Jan 27, 2016 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 3, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 25, 2023 EPSS Score

References

1034825 vdb
https://bugzilla.mozilla.org/show_bug.cgi?id=1208525 url
http://www.mozilla.org/security/announce/2016/mfsa2016-05.html url
GLSA-201605-06 vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-1940 advisory

Open in Interactive Console →