CVE-2016-5299 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-5299 PUBLISHED

Reported by mozilla · Published June 11, 2018

A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox < 50.

Affected Products

Vendor	Product	Versions
Mozilla	Firefox	unspecified
Mozilla	Firefox	unspecified

Timeline

Jun 11, 2018 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score
Jul 10, 2023 EPSS Score

References

94337 vdb-entryx_refsource_BID
1037298 vdb-entryx_refsource_SECTRACK
x_refsource_CONFIRM
x_refsource_CONFIRM

Open in Interactive Console →