CVE-2016-1948 | Vulnetix

CVE-2016-1948 PUBLISHED

Reported by mozilla · Published January 31, 2016

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

Jan 27, 2016 CVE Published
Feb 4, 2022 EPSS Score (30 in total, the first dated here)
Apr 6, 2026 Security Advisory (2 in total, the first dated here)
May 6, 2026 CVE Updated
Oct 9, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2016-1948
vulnetix vdb fixes CVE-2016-1948

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2016-1948/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

1034825 vdb-entryx_refsource_SECTRACK
x_refsource_CONFIRM
x_refsource_CONFIRM
GLSA-201605-06 vendor-advisoryx_refsource_GENTOO

Look up in the Resolve Platform →