CVE-2016-5283 PUBLISHED

Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.

EPSS 0.27% · 50.8th percentile

Risk Scores

EPSS Score
0.27%
50.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSfirefox0, 28.0+build1-0ubuntu1, 28.0+build2-0ubuntu1
Ubuntu:16.04:LTSfirefox0, 41.0.2+build2-0ubuntu1, 42.0+build2-0ubuntu1

Timeline

References

Open in Interactive Console →