VDB

CVE-2016-5299

CVE-2016-5299 PUBLISHED

Reported by mozilla · Published June 11, 2018

A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox < 50.

Affected Products

VendorProductVersions
MozillaFirefoxunspecified
MozillaFirefox*, unspecified

Timeline

  • Jun 11, 2018 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 16, 2023 EPSS Score

References

  • 94337 vdb-entryx_refsource_BID
  • 1037298 vdb-entryx_refsource_SECTRACK
  • x_refsource_CONFIRM
  • x_refsource_CONFIRM
Open in Interactive Console →
$ Console Community · 100/wk Open console ›