CVE-2016-1941 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-1941 PUBLISHED CVSS 4.300000190734863 MEDIUM

The file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too quickly, which allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.

EPSS 0.25% · 47.9th percentile

Risk Scores

CVSS v2.0

4.300000190734863

EPSS Score

0.25%

47.9th percentile

Affected Products

Vendor	Product	Versions
mozilla	firefox	0
apple	mac_os_x
n/a	n/a	n/a

Timeline

Jan 31, 2016 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score

References

1034825 vdb
http://www.mozilla.org/security/announce/2016/mfsa2016-08.html url
GLSA-201605-06 vendor-advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1116385 url
https://nvd.nist.gov/vuln/detail/CVE-2016-1941 advisory

Open in Interactive Console →